Patch Tuesday, May 2026 Edition
2026-05-13T01:23:34Z•9a190a2ee38214e054987f682197cca6a652e9996b119c4dc09cc50aa220de05
CanisterWormIranRussiaScattered-Spideranti-ddosbotnetcanvasdata-breachdata-extortionddosdoxingeducation-sectorincident-responseiotnation-statepatch-tuesdayransomwarerouter-exploittoken-harvestingvulnerability-managementwiperzero-day
What happened
Multiple high-impact cyber incidents and large vulnerability disclosures were reported: May Patch Tuesday and earlier vendor updates fixed numerous bugs and several zero-days across major vendors (Microsoft, Google, Apple, Mozilla, Oracle, Adobe). A widespread data-extortion attack against the Canvas education platform defaced logins and threatened to leak data for ~275 million students and staff at ~9,000 institutions. A Brazilian anti‑DDoS provider was found enabling a botnet that launched large DDoS campaigns against ISPs, while law enforcement disrupted four massive IoT botnets (Aisuru,Kim
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- 9a190a2ee38214e054987f682197cca6a652e9996b119c4dc09cc50aa220de05
- Enrichment time
- 2026-05-13T01:23:34Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.