AUTO-UPDATED

Patch Tuesday, May 2026 Edition

Major technology companies including Microsoft, Apple, Google, Mozilla, and Oracle are accelerating security patch releases following the integration of Anthropic’s AI-driven vulnerability detection tool, Project Glasswing.

Key Points

  • Microsoft’s May Patch Tuesday addressed 118 vulnerabilities, including 16 critical flaws, though no active zero-day exploits were reported.
  • Google’s Chrome browser received updates fixing 127 security flaws, a significant increase from the 30 vulnerabilities addressed in the previous month.
  • Mozilla’s Firefox 150 resolved 271 vulnerabilities, leading the company to adopt a more aggressive weekly security update cadence.
  • Oracle identified over 450 flaws in its latest quarterly update and is transitioning to a monthly cycle for critical security patches.
  • Apple released updates for 52 vulnerabilities, extending support back to the iPhone 6s and iOS 15.

Why it Matters

The adoption of AI tools like Project Glasswing is significantly increasing the volume of discovered software vulnerabilities, forcing major tech firms to accelerate their patching cycles. This shift highlights a new era of automated security maintenance where software vendors must manage higher frequencies of updates to protect users from newly identified threats.
Krebs on Security Published by BrianKrebs
Read original