Patch Tuesday, May 2026 Edition
2026-05-17T01:23:24Z•f65beb720b623a57113a98886593c9c68df657b6e2279ce022a31fd329ea9d53
DDoSIoTbotnetcybercrimedata-breachextortionlaw-enforcementpatchingransomwarestate-sponsoredvulnerability-managementwiperzero-day
What happened
KrebsOnSecurity roundup (Mar–May 2026): major Patch Tuesday months as Apple, Google, Microsoft, Mozilla and Oracle rush fixes for record numbers of vulnerabilities and several zero-days. A widespread extortion/data-theft campaign hit the Canvas education platform — login page defaced, ransom demand and threatened leak of ~275 million student and faculty records. Multiple disruptive campaigns and arrests: a Scattered Spider member pleaded guilty for SIM/text-phishing intrusions; German authorities identified the operator behind REvil/GandCrab; Iran-linked actors claimed a wiper attack on Stryke
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- f65beb720b623a57113a98886593c9c68df657b6e2279ce022a31fd329ea9d53
- Enrichment time
- 2026-05-17T01:23:24Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.