May 2026
Doozy of a Patch Tuesday includes 30 critical Microsoft CVEs
The good news: no 0-days. The bad news: busy week ahead for Microsoft admins
Foxconn confirms cyberattack after ransomware crew claims it stole confidential Apple, Nvidia files
Affected factories back up and running, we're told
US bank reports itself after slinging customer data at ‘unauthorized AI app’
Volume and sensitivity of the data cited as chief concerns
Cache-poisoning caper turns TanStack npm packages toxic
Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
Apple, Google drag cross-platform texting into the encrypted age
After years of stopping dead at the green bubble border, iPhone and Android users can finally send E2EE messages without relying on third-party apps
Japan’s PM orders cybersecurity review to stop Mythos going full CyberZilla
Fears exponential increase in attack scale and speed
Double Canvas breach acknowledged as ShinyHunters sets new pay-or-leak deadline
UPDATED: Sorry, kids, everything's back up so get to work on your new assignment - An essay on the ethics of paying ransoms, because it looks like that's what happened here
Anthropic’s bug-hunting Mythos was greatest marketing stunt ever, says cURL creator
After all that hype, AI scanner found one low-severity cURL flaw
BWH Hotels guests warned after reservation data checks out with cybercrooks
Customers urged to keep an eye out for phisherfolk
Checkmarx tackles another TeamPCP intrusion as Jenkins plugin sabotaged
Cybercrooks ruin engineers' weekends with Saturday attack