May 2026 Patch Tuesday: what Security and IT teams should prioritise
May 2026 Patch Tuesday covers 116 approved patch records and 183 unique CVEs across Microsoft, Adobe and SAP.
Rob Nidschelm
Tech tinkerer who spends too much time with home labs and Docker stacks. Into AI, Roman & Medieval history, and all things sci-fi. Avid traveller, reader and writer, with a passion for good food.
The Canvas Breach Exposes the Hidden Scale of Education Platforms
Two intrusions into Instructure’s Canvas platform show why a shared education service needs tenant-level visibility, tested fallbacks and careful treatment of attacker claims. Instructure detected unauthorised activity in Canvas on 29 April. On 7 May, the same actor obtained access…
The Firewall’s Authentication Portal Became a Path to Root
Attackers exploited a PAN-OS authentication portal flaw to reach root on exposed firewalls. Patching closes the entry path, but exposed appliances require incident review.
Poland’s NIS2 Law Brings 38,000 Organisations into the Cybersecurity System
Poland’s amended National Cybersecurity System Act is now in force. Its scale, registration timetable and management duties turn NIS2 into a board-level implementation programme. Poland’s amendment to the National Cybersecurity System Act took effect on 3 April 2026. The Act…
The Vercel Incident Turns AI OAuth Apps into a Security-Control Question
Vercel’s April incident began with a compromised third-party AI application and ended inside internal systems. OAuth consent deserves the same scrutiny as a privileged integration. Vercel disclosed that an attacker gained unauthorised access to certain internal systems after compromising Context.ai,…
April 2026 Patch Tuesday: what Security and IT teams should prioritise
April 2026 Patch Tuesday covers 113 approved patch records and 239 unique CVEs across Microsoft, Adobe and SAP.
Internet-Facing PLCs Turn Routine Exposure into Physical Risk
Update: The UK NCSC now reports limited real-world disruption Updated 29 August 2026: The UK National Cyber Security Centre says it has seen increased targeting of operational technology across multiple sectors globally, including the United Kingdom. The activity involves several…
The FBI Breach Shows Why Investigative Metadata Is High-Value Data
A breach of an FBI system used for court-authorised surveillance is a reminder that “metadata” can reveal operations, targets and methods even when message content remains untouched. The FBI has acknowledged suspicious activity involving an unclassified internal system used to…
A Compromised Trivy Update Led to a European Commission Cloud Breach
The European Commission used a compromised version of a trusted security scanner. The resulting breach shows that build tools can become credential-harvesting infrastructure inside the systems they are meant to protect. CERT-EU published its investigation into a European Commission cloud…
Paraguay Enacts a Comprehensive Data Protection Law With a Two-Year Runway
Paraguay’s first comprehensive personal-data law creates a regulator, reaches some overseas processing and gives organisations 24 months from official publication before the regime takes effect. Paraguay’s Law No. 7.593/2025 represents a major change from a privacy landscape previously centred on…