Patch Tuesday, May 2026 Edition
2026-05-18T07:23:26Z•a0fa9dcc85f8da0b879ba271add6c75cc034d66fd5d4996c428a581101ebfb7e
Adobe ReaderAisuruAppleBlueHammerCanvasChromeDDoSGoogleIoT botnetJackSkidKimwolfMicrosoftMossadMozillaOracleSharePointanti-DDoSbotnetbreachdata-extortioneducationpatch-tuesdayrouter compromise','Microsoft Office tokens'vulnerabilityzero-day
What happened
KrebsOnSecurity roundup (Mar–May 2026) highlights multiple high-impact cyber incidents and a heavy patching cadence across major vendors. A mass data-extortion attack against Canvas disrupted classes and threatened data from ~275 million students and staff. Multiple vendors (Microsoft, Google, Apple, Mozilla, Oracle, Adobe) issued large/urgent Patch Tuesday updates to address numerous vulnerabilities including SharePoint and Windows ("BlueHammer") and several Chrome/Adobe zero-days. Other notable items: a Brazilian anti-DDoS vendor was implicated in enabling large DDoS campaigns; U.S., Canada,
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- a0fa9dcc85f8da0b879ba271add6c75cc034d66fd5d4996c428a581101ebfb7e
- Enrichment time
- 2026-05-18T07:23:26Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.