Krebs on Security is a cybersecurity blog authored by Brian Krebs, an investigative journalist and cybersecurity expert. With a focus on cybercrime, hacking incidents, and data breaches, Krebs on Security provides  analysis, investigative reporting, and security research on emerging threats and cybersecurity trends. Developers and security professionals can learn about the latest cybersecurity threats, security best practices, and incident response strategies from Krebs' investigative reporting and expert analysis.

Krebs on Security

Microsoft's May 2026 Patch Tuesday addresses 118 security vulnerabilities with no zero-days for the first time in nearly two years. A notable trend this month is the role of AI in finding bugs: Anthropic's 'Project Glasswing' has contributed to record-breaking patch volumes across major vendors. Apple fixed 52 vulnerabilities in iOS 15, Mozilla resolved 271 flaws in Firefox 150 (with ongoing weekly security releases), Oracle patched 450+ flaws and switched to monthly critical updates, and Google fixed 127 Chrome vulnerabilities. Key Microsoft critical CVEs include a stack-based buffer overflow in Windows Netlogon granting SYSTEM privileges, a critical RCE in the Windows DNS client, and an Entra ID bypass via forged credentials.

Patch Tuesday, May 2026 Edition – Krebs on Security