Welcome back, Folks!
Today is Patch Tuesday for May, 2026.
If your Windows 10 computer can not be upgraded to Windows 11 then you should either replace your device or use the Windows 10 ESU program to get another few months out of it.
Windows 11 25H2 is now available and Windows 11 23H2 and older are no longer supported. It’s safe to upgrade to Windows 11 25H2 now, but be prepared for the Start Menu to change. You will likely want to click the “View” drop-down and switch to List.
macOS 26 Tahoe is available and macOS 13 Ventura and older are no longer supported. macOS 26 is stable and you should upgrade to this version if your hardware supports it.
There were 1350+ major hacks, and over 680 application updates this month. It’s a huge month, with about 7.0 GB of updates for most users.
This Month in Technology
There were over 1350 major hacks this month (click to expand).
10bis, 1st Solution CTC, 2m.ma, 7-Eleven, A & A Building Material, Abazia SpA, Abfallwirtschaft Kreis Kassel, ABI and Ideal Tape, Abu Dhabi Department of Finance, Abuhatim, Académie de Montpellier, Access Information Management Shared Services, LLC, Accessoires Outillage Ltee, Accessories Machinery, Accretech America Inc, ACCRETECH SBS, Accurate Nursing Services, ACFA Regionale de Calgary, Acros Sport GmbH, ActionAid International, ActionAid Tanzania, Adams County, MS,Adaptavist Group, Addi, Adelante Soluciones Financieras, Adobe ColdFusion, Adobe Photoshop, ADT, Adumo, Advanced Family Surgery Center, Advanced Laundry Systems, Advanced Programs, Advanced Software Products Group, Advanta Genetics LLC, advprograms.com, Aerodiagnostics, Ahorramas, Airdrie Physiotherapy, Al Gosaibi GTB, Al Rawdah Cooperative Society, Al Sulaiti Law Firm, Alaska Air Group Federal Credit Union, Alberta, Canada, voter database, Alert 360, Alexander Group, Alexandria Petroleum, Alge Stop, Algosaibi GTB, Alior Bank, Alkegen, Alliance Roofing Company, Inc, Alpinion Medical Systems, Alpinion, Altpro, ALUPCO, Alva Manufacturing, ALX PC, Aman Resorts, Aman, Ameriprise Financial, Inc, AMS Group, Amtaar, Amtrak, Analog Gold, Anderlues, Andrew T Johnson, Anser Coding, Anthropic Claude Mythos, Antica Sartoria, Anvil Arts, AOTCO, Apache ActiveMQ, Apache Camel, Apache MINA, Apache Wicket, Aplast, Apothebeauty, AppDirect, Apple AirTag, Apple Film Group, Apple macOS APFS, Apple macOS AppleJPEG, Apple macOS Crash Reporter, Apple macOS HFS, Apple macOS Kernel, Apple macOS mDNSResponder, Apple macOS SMB, Apple macOS Spotlight, Apple macOS WebKit, Apple macOS Wi-Fi, Apply Capnor, APTIM, Arban, Carosi & Diana Precast, Arbitrum, ARC Reins, Arcadia Building Materials, Arcelik, Arctic Home Living, Arelle, Arizona Professional Painting, Armstrong George Cohen Will Ophthalmology, Arnold Clark, Aroostook Mental Health Center, Arrawdah, Arup Group, ARWINI, Asaniverko, Asesoría Uriel, Ashtech Infotech, ASI Paving, Asian Football Confederation, ASP.NET, ASPG, Asphalt Specialists, AssetMark Trust, Assurea Insurance, Assurified, Astim, ASTM Group, Astreya, Asunim, ASUSTOR ADM, ATEN Unizon, Atencio Engineering, ATF Aerospace, Atkinson Ritson Solicitors, Atlas Metal Industries, Austin Plastic & Reconstructive Surgery, Automobile Club of Southern California, AutoRisk, Autovista, Avalon Flooring, Avast Premium Security, Avitrans, Avnet, Avon Material Supplies, AXCERA TRADING, Ayuntamiento de Valdemoro, Azure AI Agent, B to B Visions, B&E Juice, B3 Bruck, Baldinger AG, Banak, Banco Bilbao Vizcaya Argentaria, Banco Rendimento, Bandeirante Supermercados, Banister House School, Bank of Scotland, Bank3, Bankasia BD, Baorui Machinery Engineering, Bardehle Pagenberg, Baresque Group, Basch & Keegan, Basch Keegan & Spada, Basecamp, Basic-Fit, Bay Area Herbs, Bay State Land Services, Bayou Title, Inc, Bayside Dental, BBA Law Group, Beaconhouse School System, Beauty Parlour Management System, Bela Pharm, Belarus’ Kamunikat, BELFOR Property Restoration, Belmont Aesthetic and Reconstructive Plastic Surgery, Bentley Capital Ventures, BePrime, Berger & Williams, LLP, Berman Skin Institute, Better House, Beyond Measure Design and Construction, bg.ac.rs, BGCS NV, Bideawee, Bigals Foodservice, Bimtrazer, Biotehnos, Birtcher Anderson & Davis, Bitcoin Core, Bitwarden CLI, BK Tomorrow, Bladex, Blue Enterprises, BMS, BMT Pacific, BMTP, Bohmler Einrichtungshaus, Bol.com, BOMU Hospital, BookBlock, Booking.com, Boots Transport, Boston Capital, Boxtopia, Boys & Girls Clubs of Southern Nevada, Braintrust, Breslin Builders, Bridgeway Consulting, Brittany Residential, Bronzeville Hospital, Buckley Powder, BUN, BWH Hotels, Böhmeler, C2O Architects, CAD-IT UK, Cadence Petroleum Group, CADIT UK, Cahbo Produkter, Calidra, Calsoft Inc, Canada Goose, Canada Life, Canvas, Capnor, Caravaning City, CardioFit Medical Group, CARE Clinic, CarePoint Health, Carlson Maintenance, Carma Packaging, Carnival Corporation, Casale Del Giglio, Casino Gaming Commission, Cass information Systems, Catalyst SD-WAN Manager, Cazh, CCD Interiors, CEAGESP, CEGASA, Celeris Networks, Centers for Medicare and Medicaid Services (CMS), Central Medical Services of Westrock, Centrum, Certified Infosec, Ceywater Consultants, CF Evans Construction, CGCSA, Chaffey Joint Union High School District, Champhunt, Champion Homes, CHARLES CONSEIL COORDINATION (3CCC), Charles River Insurance, Chartered Institute of Bankers of Nigeria, Chartwell Law, Chase Cooper Limited (RiskLogix Solutions), CheckMarx Jenkins, Cheeky, Chelten House, ChestnutCMS, Cheval Blanc Randheli, Childplace Family Services, China’s Apple App Store, ChipSoft, Churchill Claims Services, CHX Express, CipSoft, CIR Realty, Circle U Foods, Cisco Adaptive Security Appliance, Cisco Crosswork Network Controller, Cisco Firepower Appliance, Cisco Network Services Orchestrator, Cisco Webex, Citizens Bank, City Health, City of Anthony, NM, public records office, City of Greenfield, WI, City of Napoleon, OH, City of Sandstone MN, City of Sandstone, MN, City of Suffolk, VA, City’Pro, Clark Fixture Technologies, Clarkson Walsh & Coulter, Clearview Intelligence, Clearwater Marine Aquarium, ClickUp, Cline Kanban Server, Clinical Registry Solutions, Cloud Imperium Games, CloudNativePG, CMA Aquarium, CMC Expertise Comptable, CMI Management, CMS Provider Directory, CMS WPC, Coast Appliances, Cockpit, Cofaco Industries, Cognizant, Colegio María Inmaculada (CMI), Colegio Notre Dame Campinas, Color Communications LLC, Colorado Dental Wellness Center, Columbia Bank, Colégio Notre Dame Campinas, Comet Backup, Commscope, Community Bank, Community Health Systems, Compass Housing Alliance, Compensatii, Complastex, Complete Aircraft Group, Comunidad Andina, Conduent Business Services, LLC, Congoleum, Connected Credit Union, Construction Sciences, Consumer Goods Council of South Africa, Cookeville Medical Center, Cookeville Regional Medical Center, Cooperativa de Hospitales de Antioquia, Corah Peru, Coralina, Cornerstone Care Center, Costa Solutions, CourtSmart, Cox, Castle & Nicholson, cPanel, Crank Communications, CrediElite, Credio, Credit Technologies, Credix Fibextelecom, CSA, CSB Battery, CSW Industrials, Cult Wines, Cunningham Prosthetic Care, Cure Dental of Belton, TX, Cursor, Curtis Design Group, Cushman & Wakefield, D Heinrichs Logistic, D’Ambrosio Dodge, D-Link DIR-823X routers, D-Troy Logistics, Daemon Tools, Daguan Technology, Dahlgrens Cementgjuteri, Dalfox Server, Dania Dermatology, Data Exchange Corporation, DATAMATIC, Datamatics Global Services, DataSavior, Decatur Diagnostic Lab, Defcon5italy, Defense Health Agency, Dell ECS, Delon Hampton, Delta Electronics ASDA-Soft, DENSO Thermal Systems, Denton Calvary Academy, Depósito Dental Universitario, DermaPharm, Dermatology Treatment and Research Center, DermCare Management, Desert Christian Schools, Desysweb, DEVCO, Dexcom, DICOM servers, DigiCert, Dillon Family Medicine, DIME Distribuidora, Directorate General of Customs and Excise, Disk Precision, Diviso Grupo Financiero, DL Cohen Construction, DM Schweiz, Docker Desktop, DocketWise, Doghair Inc, Dorotea Mekaniska, DotNetNuke, DOUGLAS M SMITH & CO CPAS, Douglass Truck Bodies, DPWH of the Phillipines, Drive IQ, DriveLock, Dunav Insurance, Duo, Durable Tech, Durable Technologies, Dutch Vrije Universiteit, e-Jones Associates LCC, Earth Systems, East, EasyFlow .NET, EBR Systems, Eclagestio360, Eclipse Display & Promotion AB, Econ Packaging, Edenshaw Developments, Eduporium, EEC Group, Egnyte, egov.sc, Ekubo Protocol, El Ordeno, Elia Law Firm, Elken SDN BHD, Elken, EMA Engineering & Consulting, Empaques Carma, Empire Express, Empower Group, EMTCO, Endeavour Automotive, Energy Action, Engie, Engineered Advantage, Engineered Machine Tool, Englewood Lab, Epcon Communities, Epiq Global, Epoch Times, Equatorial Coca-Cola Bottling, Erla Technologies, ERS Transporte e Logística, ETTP, EU age verification platform (in 2 minutes), Euro Creations, Evict them for me, Eworld Me, Excel DOR, Excel Healthcare Receivable Management and Consulting, Exclusive Networks, Exco Technologies, Exim BDAT, Expeditor, Express, Fabritius, FAFS, Fagen Friedman & Fulfrost LLP, FANASA, Far East Horizon, Farella Braun + Martel LLP, Fargo Chamber of Commerce, Fargo Moorhead West, Farmers Association of Iceland, Fashinza, FAT Brands, Favelle Favco, Ferguson Timar, Fidelity United, FileBrowser, Firefox, First Cambodia, First County Federal Credit Union, First United Methodist Church Boerne, Fiserv, Fital Treppenlifte, Fiverr, FL Auto Lawyer, Flash Charm INC, FLB Group, Fletcher Chrysler Products, Flipo Group, Florida Academic Dermatology Center, FlowiseAI, Floyd Skeren Manukian Langevin, LLP, Flynn Group, FlySafair, FMS, Fogel Capital Management, Follett Software LLC, Foodini, Foodsmart, Forestdale, Forsheda Stlverktyg, Fortinet FortiWeb, FOSPIBAY, Fox Broermann Pediatric Dentistry of Tulsa, FOXCONN, Foxit PDF Reader, Foxstone Financial, France Titres (ANTS), Franziskusschule Wilhelmshaven, French Education Ministry, FriendlyCare Pharmacy, Frontwave Credit Union, Frost Bank, Fulcrum Real Estate Services, Funky Chunky, Galliher Law, Gardyn Smart Gardens, Gastroenterology & Hepatology of CNY, Gator Cases, Gavelhouse, GED Co, Gelatissimo, Gemini CLI, Genealogy SA, General Hardware and Builders Supply, Gennet AI, Georgia Heritage, German Standard Group, Gerrard, GGI Tokio Marine, GGIP Insurance, GIMP, Gingerich Trucking, GitHub, GitLab, GL Steel, Glendale Obstetrics & Gynecology, Global Merchandising Services, GNS, Good Samaritan Health Center, Goodwin University, Google Chrome, GoTip, Goulston & Storrs, GovGuam, Grand Home Mart, Graphic Information Systems, GRAU GmbH, GrayRobinson PA, Greenpharma, Greenwoods Dental and Surgical Centre, Gregory Jewellers, Grinex, Groupe 3R, Grupo ABC, Grupo EBD, Grupo Principal, Gruppo ICM, GStreamer, GTFO ICE, GTL Company, GUEGUEN Avocats, Guesty, GUMPP Kunststoffe, Gursoy Grup, H P Klughardt, HACA, HackerOne, Hans Huonker, Harbor Developmental Disabilities Foundation, Harris Beach Murtha, Hathcock, Hatica, HBX Group, Heartland Steel Products, Heinrich Kopp, Heinrich KUPER, Heinrichs Logistic, Helix Energy Solutions, Hematology Oncology Consultants, Hengan International, Henley & Company, Heritage Bank, Highmark Companies, Hillcrest Plastic Surgery & Dermatology, Hillside Lumber, Hoeren Gartencenter GmbH, Hokuyo, Hollywood Dermatology, Horizon Media, Hospital Caribbean Medical Center, HostBooks, Houghton Mifflin Harcourt Company, Houk Air Conditioning, HP DeskJet 2855e, HPK, HS Technology Group, HSJ Lawyers, Humana (again), Huonker GmbH, Hyperbridge, IAM, IBM, IBM Aspera, IBM Italy, IBS, IC Partners, Ice Open Network, Ideal Home Care & Duncan Regional Hospital, IDS, IF MIS, IMA Design, Imbrie Law Firm, IMEVI, Imex International, Immigration Services Department Tanzania, Impac Mortgage Holdings, Inc, Incyte, Indcar, Indemalla, Indonesia Customs Analytics Platform, Indonesia Game Rating System, Industrial Carrocera Arbuciense, Informa, InjuryLawyers.com, Innovative Scientific Solutions, Inox Market Service SpA, Inspira, Instapack, Institute of Public Accountants, Instituto Maria Schmitt, Instructure (twice), Integer, Integra Architecture, Integrated Pain Associates, Integrated Process Engineers and Constructors, intercom-php, Interim HealthCare of Amarillo, Interim HealthCare of Lubbock, International Customer Care Services, Interventional Pain Center, Interzero, Intikom, Intra, Intuitive Machines, Iowa Department of Health and Human Services, Iowa Spring Manufacturing and Sales, Iowa State University, IPE Technologies, Iran’s nuclear program, Ireland education system, IRES, iSherlock, ISOSL, iStar Pal, IT Freitag, IT Management, ITC Group, iTerm2, Itron, Inc, Ivanti EPMM, Ivanti Neurons ITSM, J&G Pavers, Jackson County Visitor Center, Jackson County, IN, Jackson Lewis, Jacobs Doland Beer, Jastrebarsko, Jayeff Construction, JC Resorts LLC, JDownloader, JE Contracting, JE NYC, Jean Cultural & Creative, Jeff Honeycutt Insurance Agency, Jenkins GitHub Plugin, Jesin Group, Jet Machined Products, JetBrains TeamCity, JG Petrucci, JG Stewart Construction, JGB, JMI General Engineering, JOH Investments Limited, Johnson & Johnson Innovative Medicine, Jones Day, JOT, Jozef Stefan Institute, Jumbo Transport, K & E Distributing, K2 Electric Inc, Karl Chevrolet, Karmadata, Kasapreko, Katahdin Technology, KB Toys, Keller Williams Real Estate, KelpDAO, KEMBA Indianapolis Credit Union, Kemenpppa, Kementerian Pertanian Republik Indonesia, Kent District Library, Kentwood Public Schools, Keretapi Tanah, Kettering Health, Keys Dermatology, Kingborough Council, Tasmania, Kisnet, Kolin Turkey, Kraken, Krause & Co, KRW Lawyers, KTMB, Ktunaxa Nation Council, Kubiak Melton & Associates, KUPER, Kurita Europe, Kınık Gross, LA Care Health Plan, La Kaffa International, La Maison Bleue France, La Tuilerie, LA Woodworks, LaBonne’s Markets, Laboratório Santa Luzia, Laclinic Montreux, Lacoste, LACROIX, Lals Group, Lama Isonducitron, LANAP, Langenberg, Strubberg, Arand & King, LLC, Laurel Eye Clinic, Lautrec, Law Office of Steven R Smith, Law Offices of James C Shields, Law Offices of Mery Lopez, Law Offices of Michael A Freedman, Lawson Software, LayerZero, LDI Solutions, Le Maire de QUIBERON, Lee & Lee Country Club, Legend Senior Care, Legilog, LegionProxy, Leistritz Turbine Technology, Lena Health, Lennox International Inc, Leone Film Group SpA, LeRobot, Lessard Dental, Levante Living, LexisNexis, Lexus, Liberty Bankers Life Ins. Co., Liberty Mutual, Lifeline PCS, Lifelong Access, Limkon, Lindabury McCormick Estabrook and Cooper, Linux Kernel (Copy Fail), Linux Kernel (Copy Fail 2), Linux Kernel (Dirty Frag), Linux PackageKit (Pack2TheRoot), Litecoin, Liteline, LiteLLM, LMDeploy, Lone Peak Psychiatry, Lonestar Truck Group & Tag Truck Center, Longwood Engineering Company, Lopez Law FL, Los Angeles County Office of Education, Louisiana Association for Justice, Lovable, LSM Lees Sheet Metal, Luna Group, Lymphedema Therapy Specialists, Lynx Precast, M&T Bank, MAC Construction & Excavating, Madison Area YMCA, Mag Fünder Hausverwaltungs, Magento LTS, Magisterial Service, Magnolia (Israel), Mahidol, Maia Douro, MailGates MailAudit, Mairie de Quiberon, Malaysian NPK Fertilizer, Malwarebytes Anti-Malware, Management-ILA Managed Health Care Trust Fund, Manatee Air Heating and Cooling, Manhattan Fire Safety Corp, Manulife Wealth, Manx Telecom, Marc Cain, Marchesi di Barolo, Marcus & Millichap, Marin Cancer Care, Marino Food Products Pvt, Marlborough Partners, Marnell Financial, Marutake, Maryland Department of Assessments and Taxation, MassDevelopment, Mastodon, Maximum Mold, Mazzola Mardon, PC, MBK Maschinenbau, McCarthy, McCor Management, McCuaig & Associates Engineering, McGraw Hill, McKay, MCO, MCP Protocol (who could have guessed?), Media Consulting, Mediaplex, Mediaworks Kft, Medical Networks, Medical Pay, Medicare, Medika Plaza, Meditron, Medtronic, MemberSource Credit Union, Mercedes-Benz of Egypt, Merlo, MES Hybrid Document Systems, Mesquite Plumbing, Mesto Jemnice, MetInfo CMS, METO Systems, Metro ILA Funds, Meyzietp, Miami Plastic Surgery, Microsoft Defender, Microsoft Defender (BlueHammer), Microsoft Defender (RedSun), Microsoft Edge, Microsoft EntraID Entitlement Management, Microsoft Office/365, Microsoft Olive, Microsoft Phone Link, Microsoft SharePoint Server, Microsoft Snipping Tool, Microsoft VC++, Mid Florida Dermatology & Plastic Surgery, Mile Bluff Medical Center, Military Packaging, Millennium Dental Technologies, Millennium Packaging, Millennium Partners, Million Dollar Baby, MIMS, Mindpath Health, Minidoka Memorial Hospital, Misr Chemical Industries, Missouri School Voucher platform, MOC CAE, Moldova national medical database, Monero RCP, Monumental Sports & Entertainment, Moorman Harting, Mopec, Morae, Morning Star Tours, Morocco Vocational Training Platform, Moser Spielgeräte, Mother’s Market & Kitchen, Movistar Peru, MP Sir David Davis, Mrs Holdings, MsQuic, MST Construction Equipment, Mt. Spokane Pediatrics, MTCI, Mullinax Ford, Mundo Amtae, Municipality of Anderlues, Munster Technological University (MTU) Kerry, Murata Electronics, Murni, My Compliance Office, NanoClaw, Nanometrics, Narteks Tekstil AS, National Center for the Rights of the Child, National University of Singapore, Navigator360, NBD3PL, Nephrology Associates, PA, Netgate pfSense CE, Netrom Software, Neurotrials Research Inc, New South Wales Treasury, Newman and Marquez, Nginx UI, NI LabVIEW, Nigeria Corporate Affairs Commission, Nijborg Staal, Ningbo Tuopu Group, Nobu Restaurant Group Holding Company, LLC, Node.js, Node.js vm2, Norcal Training Center, Nordenta, Nordstern Technologies, North Bay Distribution, North Shore Environmental Consultants, North Star Signs, North Texas Behavioral Health Authority (NTBHA), Northwoods Surgery Center, Norton Secure VPN, Nostrum Corporation, Note Mark, Notification, Nova Fire Protection, Novo Air BD, Nrt India, Nutrabio, NVIDIA GeForce NOW, NVIDIA NVFlare Dashboard, NWLR, Ocean City Radio, Office Furniture Group, Oklahoma State Tax Commission, Oklahoma State University, Ollama, Olpro, Ontario Physiotherapy Association, Open WebUI, OpenAI Codex, OpenCart, OpenCATS, OpenClaw, OpenEMR, OpenViking, OpenVPN, Optimization Software Technologies, OR Technology, Oracle VirtualBox, Orekait, Oriental Weavers, OS Sistemes, Osof Tec, Ossistemes, Ouster, Inc, Ovex Technologies, Palacroix, Palladium Teknoloji ve Mühendislik, Palmers Relocations, Palo Alto Networks PAN-OS, Palo, Panal Seguros, Pangolin Editions, Park Dental Research, ParkEngage, Parque Eólico Toabré, Pavarini McGovern Construction Models, Peakside Ros Outlet Management, Pegasus SRL, Pemberton Valley Dyking District, PennEastern Architects, Pequod Associates, Peroni Sosa Tellechea Burt & Narvaja, Peru LNG, Peyton Law Firm, Pharmathek, PHB, Philex Mining, Philip Lee, Phoenix Art Museum, Photonic, phpVMS, Pindrop Hearing, Pine Bluff School District, Pipestone Holdings, Pitney Bowes, Pixiv, Planet Sport, Playmates Toys, PlayStation, Plunkett Cooney, Point Four EPoS Solutions, Poland’s water tratment plants, Pollen Information, Polycorp, Polymarket, Positiwise Infotech Pvt, PowerCampus, PPI Plastics Group, Practice by Numbers, PraisonAI MCP, Precision Coating, PremCom UK, Prescott Holden Family Law, Pricon Microelectronics, Priests for Life, Prime Care 12 Priority Health, Prime Properties, Primius Law Firm, Probity Contracting Group, ProFTPD, Progressive Oral Surgery & Implantology, Progressive Propane, Promotion AB, Prospector Portal, Protecta Security, protobuf.js, Providence St. Joseph Orange, Providence, Provident GH, Provident Insurance, PSTBN, PT Murni Solusindo Nusantara, PTS Office Systems, PublicCMS, Punch & Associates Investment Management, Putzbär, PVDD, PyTorch Lightning, Qatar Biomedical Research Institute (QBRI), Qinglong, QNAP TS-453E, Queen’s University Belfast, Questivity, R L Larson Excavating, R Roese Contracting, Raich, Rain Makers Solutions, Rainforest Carwash & Oil Change, Rainmakers Solutions, Ralph Lauren, Raptor Supplies, Rayco Lighting, RBH Aerospace, Reborn Gaming, Reddy Cardiac Wellness and Diabetes Reversal Center, ReFocus AI, Rehab Clinics Group Ltd, Reliance Jio Infocomm, Rendon Center for Dermatology & Aesthetic Medicine, Renegade, Reschio, Restaurant Management Company, Rhactus Hotel, Rhea Finance, Rheem, Rhode-HV, Riggotts, RiskLogix Solutions, Ritta, Rituals, Rizzuto Law Firm, RJRGLEANER Communications Group, Robinhood, Robot Technology Research Group, Robusta, Roca Asociados, Rocket.chat, Rockville Fuel & Feed, Rocky Mountain Associated Physicians, Rogiken Institute of Science Tokyo, Roman Catholic Archdiocese of St John, Ropers Majeski PC Information, ROS Retail Outlet Shopping, Rosehill Gardens, Rotak, Rotary Club of Bandar Seri Begawan, Royal M Hotels and Resorts, RT Software, Ruiz Barbarin Arquitectos Slp, Rural Municipality of Gimli, Rusk County, Russian government, Rutan & Tucker Law Firm, Rutgers University, RXNT, Région Occitanie, Réseau Radiologique Romand, S4K Entertainment, SafeRain, Safety Engineering Laboratories, Saint Anthony Hospital, Salama Islamic Arab Insurance Company, Salesforce Marketing Cloud, SalesKido, Salimetrics, Sampol, Samsung MagicINFO, Samuel I. White, San Diego Community College District, SanCor, Sandberg Phoenix, Sandhills Medical Foundation, Sanger Skilled Care, Sanna Web, Sansiro Stadium, Santa Luzia, Sanver Forte, SAP Commerce Cloud, SAP S/4HANA, Scales and Associates, ScopeSet, ScrogginsGrear, SCS Engineers, SDK Environmental, Sea Air International Forwarders, Sea Telecom Br, Seagate Capital Construction, Secran, Securitevolfeu, See’s Candies, Seiko USA, SEIT, Selex, Sella, SEPPmail Secure Email Gateway, Sequoia Dental, Sertes, Serveis Mèdics Penedès, Service Power.com, ServiceMaster Clean, Shenzhen Gongjin Electronics, Sherwood Mutual Telephone Association, Shields Law, Shingle and Gibb Automation, Shipping Services, SHJ, ShowDoc, Shropshire Council, Siapenet, Sibilla Capital, Siemens SINEC, SIG, Signal on iOS, Silfab Solar, Silicon Alley, Sistemas Electrónicos y de Telecomunicaciones, SIT Group, Site Design Group, Skin Center of South Miami, Škoda, Slah CMS, Slovenia Civil Aviation Agency, Smart Systems, SMP, SMTA Sherwood Mutual Telephone Association, Snipe-IT, Soavegel, SocialEngine, SOGO Auction, Solari Accountancy, Inc, SonicWall, Sons of American Revolution, Soomgo, Soprolux, Sound Insurance, SourceCodester Payroll Management and Information System, SourceCodester Simple Music Cloud Community System, SourceCodester Vehicle Parking Area Management System, South Florida Injury Centers, South Staffordshire Water Works, Southcoast Health, SPEED Group, Spokane Digestive Disease Center, Spring Cloud Config, Springfield Hospital, Sri Lanka Finance Ministry, St Annes Catholic School and Sixth Form College, St Bernard’s Catholic Primary School, ST LLC, St James Place, St Luke Lutheran Community, Standard Bank of South Africa, Standard Bank, Standard Examiner, Star Energy Geothermal, Star Precision, Starr Insurance, Steel Warehouse Co, Steinger, Greene & Feiner, Stelia North America, Sterimed, Stonehenge Inter, Straightline, Strata Republic, Strategic Imports, Stride Learning Company, Stryker, Studio Marchi Associato, Studio Più, Studio Ubertazzi, Stuf Storage, Suma Sklep, SUMAC, Sunlight Express Airways, SunSource, Super AI, Superintendencia de Ordenamiento Territorial, Suzhou Yike Kejian Architectural Design Research Institute, Swansea Ambulance Corps, Sweden Thermal Plant, Sylvania Group, Symcor, Synergy Engineering, Synmosa Biopharma, Sysco, Sécurité Vol Feu, Tab Service, Tacosa, Tails, Taiwan TETRA high-speed rail, Talon Solutions, TanStack, TBK DVRs, TDS Telecommunications, TeamPCP, Teamsters Local 773, TeleMiracle, Teleos Systems, Terra West Management Services, Texas Hearing Institute, Texas Tech University Health Sciences Center, TFE Group, Thailand Council of Engineers, The American Board of Preventive Medicine, The Canada Life Assurance Company, The Country Club of Darien, The FAFS, The Galliher Law Firm, The Gentlemen, The Go Solution, The Great Cookie, The Institution of Civil Engineers, The Marton Agency, The Modern Flour Mills and Macaroni Factories, The Panic Room, The Switch Enterprises, ThinkPHP, Thompson Builders Corporation, Thomson Reuters, Thruway Plumbing Service, Time Equities, Time-Cap Labs, TKM, TLC Trial Team, Tokoparts, Tokyo Hoso Kogyo, Tor, Towerpoint Wealth, Town of Norwell, TP-Link Archer AX53, Tractial, TransGlobal Insurance Agency, Inc, Travel Expert, Tree Law Office, Trellix, Tremcar, TrendAI Apex One, Tri-Cities Gastroenterology, Triad Radiology Associates, Trifecta, Trimble, Trinite Solutions, Triquim, Truckload Carriers Association, TruGreen, TrustedVolumes, TSYS, TTT Corporation, Tulsa Regional Chamber, Tungsten Capture, Tuopu, TWU Local 100, TYLin International Group – Taiwan, Udemy, Uganda Ministry of Agriculture, UK Biobank, UK Electronics, UMILES Group, Unipest, Unique Computer, Universal Pure, University of AlKafeel, University of Iowa, University of Macedonia, University of Michigan/Michigan Medicine, University of Oklahoma, University of Warsaw, University of Witwatersrand, Uniview Technologies, Unoaerre, Unre3d, US Marines, Uzbekistan government, VAC Aero International, Van Atta Engineering, Van Heyghen Staal, Velociraptor, Vercel, VeriCon, ViaQuest, Vilhelmina Municipality, Vimeo, Virginia Health Services, Vluznet, Vodafone, Volo Protocol, Volterres, VP Brands, Walman Optical, Wasabi Protocol, Washington VA Medical Center, Waterford Hotel Group, Wayne Brothers Construction, Weaver E-cology, Web Hosting Hub, Inc, WEDA Robotics, Weiss Personalmanagement, Werner Rohde Hausverwaltung, West Pharmaceutical Services, Western Orthopaedics, Weston Consulting, Whessoe, WHM, Wibeats, Wilkem Group, Windows IKEv2, Windows Shell, Windows Task Host, Windward Life Care, Winnitex (Americas) Limited, Winona County, MN, Wm Sopko & Sons, Woflow, WOHA, Wonderland Child & Family Services, Woodfields Consultants, WordPress Accordian and Accordian Slider plugin, WordPress Breeze Cache plugin, WordPress Create DB Tables plugin, WordPress Download From Files plugin, WordPress EssentialPlugin suite, WordPress MStore API plugin, WordPress Quick Page/Post Redirect plugin, WordPress Sendmachine plugin, WordPress TheCartPress plugin, WordPress Visa Acceptance Solutions plugin, WordPress WebStack theme, Worralls, Woundtech, Wyoming County, NY, Xtrim Corporate Group, Yad Vashem, Yale University, Yang Ming Marine Transport, Yang Ming, Yazoo Valley Electric Power Association, YouX, Zampell, Zara, ZenBusiness, Zenergy, Zinkan & Barker Development, Zojirushi, Zona Ovest Torino, ZSFH, and ZSIC Life have reported hacking or compromises this month.
Bluesky, Let’s Encrypt, Mastodon, Microsoft Teams, Outlook.com, Ubuntu, and X/Twitter have suffered from outages this month.
Internet access throughout Guam, Iran, and South Africa has been blocked our down for extended periods.
Last months updates broke Microsoft Teams (twice), Remote Desktop, Windows Backup, Windows Certificate Store (via Microsoft Defender), Windows Server, Windows Universal Print Protocol, and Windows Update.
Claude AI destroyed the entire PocketOS platform, on its own, in only 9 seconds.
“Individuals generally have no reasonable expectation of privacy in information disclosed to a third party and then conveyed by the third party to the government.”
Congress has renewed the warrantless FISA platform for three more years.
European police have emailed 75,000 people to request they stop participating in DDoS attacks.
The UK National Cyber Security Centre (NCSC) has unveiled a new technology designed to protect video connections from cyber-attacks, SilentGlass. My paranoid mind immediately thinks: “Wow, a new piece of hardware that’s going to be adopted by security-conscious people that will introduce it’s own vulnerabilities!”
Just how easy is it to violate military security? About $6.
“Ivory towers” like age verification services are highly targeted and poorly secured.
Instagram is removing encryption. Switch to something else.
Now for the good news:
Apple has finally added end-to-end encrypted (E2EE) messaging.
Let’s Get Busy
Now back to our regularly scheduled program.
Patch Tuesday is huge this month. The typical computer should see roughly 7.0 GB in updates today. Let’s get started.
Microsoft released 72 updates to address 265 vulnerabilities in .NET, AMD CPU Branch, ASP.NET Core, Azure AI Foundry M365 published agents, Azure Cloud Shell, Azure Connected Machine Agent, Azure DevOps, Azure Entra ID, Azure Logic Apps, Azure Machine Learning, Azure Managed Instance for Apache Cassandra, Azure Monitor Agent, Azure Notification Service, Azure SDK, Copilot Chat (Microsoft Edge), Data Deduplication, Dynamics Business Central, GitHub Copilot and Visual Studio, M365 Copilot, M365 Copilot for Desktop, Microsoft Data Formulator, Microsoft Dynamics 365 (on-premises), Microsoft Dynamics 365 Customer Insights, Microsoft Edge, Microsoft Edge for Android, Microsoft Office, Microsoft Office Click-To-Run, Microsoft Office Excel, Microsoft Office PowerPoint, Microsoft Office SharePoint, Microsoft Office Word, Microsoft Partner Center, Microsoft SSO Plugin for Jira & Confluence, Microsoft Teams, Microsoft Windows DNS, Power Automate, SQL Server, Telnet Client, Visual Studio Code, Windows Admin Center, Windows Ancillary Function Driver for WinSock, Windows Application Identity (AppID) Subsystem, Windows Cloud Files Mini Filter Driver, Windows Common Log File System Driver, Windows Cryptographic Services, Windows DWM Core Library, Windows Event Logging Service, Windows Filtering Platform (WFP), Windows GDI, Windows Hyper-V, Windows Internet Key Exchange (IKE) Protocol, Windows Kernel, Windows Kernel-Mode Drivers, Windows LDAP – Lightweight Directory Access Protocol, Windows Link-Layer Discovery Protocol (LLDP), Windows Message Queuing, Windows Native WiFi Miniport Driver, Windows Netlogon, Windows Print Spooler Components, Windows Projected File System, Windows Remote Desktop, Windows Rich Text Edit, Windows Rich Text Edit Control, Windows Secure Boot, Windows SMB Client, Windows Storage Spaces Controller, Windows Storport Miniport Driver, Windows TCP/IP, Windows Telephony Service, Windows Volume Manager Extension Driver, Windows Win32K – GRFX, Windows Win32K – ICOMP, and MSRT. This includes security updates. A reboot is required.
Oracle released 296 security updates this quarter to address 448 vulnerabilities in 156
product lines. Products include JD Edwards EnterpriseOne Tools, Management Cloud Engine, MySQL Cluster, MySQL Connectors, MySQL Enterprise Backup, MySQL Server, MySQL Shell, MySQL Workbench, Oracle Access Manager, Oracle Adapter for Eclipse RDF4J, Oracle Agile Product Lifecycle Management for Process, Oracle APEX, Oracle Application Development Framework (ADF), Oracle Application Testing Suite, Oracle Autonomous Health Framework, Oracle AutoVue, Oracle Banking Branch, Oracle Banking Cash Management, Oracle Banking Collections and Recovery, Oracle Banking Corporate Lending, Oracle Banking Corporate Lending Process Management, Oracle Banking Credit Facilities Process Management, Oracle Banking Liquidity Management, Oracle Banking Origination, Oracle Banking Payments, Oracle Banking Supply Chain Finance, Oracle Banking Trade Finance, Oracle Banking Trade Finance Process Management, Oracle Banking Virtual Account Management, Oracle BI Publisher, Oracle Blockchain Platform, Oracle Business Activity Monitoring, Oracle Business Intelligence Enterprise Edition, Oracle Business Process Management Suite, Oracle Commerce Guided Search, Oracle Communications Billing and Revenue Management, Oracle Communications BRM – Elastic Charging Engine, Oracle Communications Cloud Native Core Binding Support Function, Oracle Communications Cloud Native Core Certificate Management, Oracle Communications Cloud Native Core Console, Oracle Communications Cloud Native Core DBTier, Oracle Communications Cloud Native Core Network Exposure Function, Oracle Communications Cloud Native Core Network Function Cloud Native Environment, Oracle Communications Cloud Native Core Network Repository Function, Oracle Communications Cloud Native Core Network Slice Selection Function, Oracle Communications Cloud Native Core Policy, Oracle Communications Cloud Native Core Security Edge Protection Proxy, Oracle Communications Cloud Native Core Service Communication Proxy, Oracle Communications Cloud Native Core Unified Data Repository, Oracle Communications Convergence, Oracle Communications EAGLE, Oracle Communications EAGLE Application Processor, Oracle Communications EAGLE Element Management System, Oracle Communications EAGLE LNP Application Processor, Oracle Communications Element Manager, Oracle Communications Instant Messaging Server, Oracle Communications LSMS, Oracle Communications Messaging Server, Oracle Communications Network Integrity, Oracle Communications Offline Mediation Controller, Oracle Communications Operations Monitor, Oracle Communications Order and Service Management, Oracle Communications Performance Intelligence Center, Oracle Communications Policy Management, Oracle Communications Service Catalog and Design, Oracle Communications Session Border Controller, Oracle Communications Session Report Manager, Oracle Communications Unified Assurance, Oracle Communications Unified Inventory Management, Oracle Configuration Manager, Oracle Data Integrator, Oracle Database Server, Oracle Documaker, Oracle E-Business Suite, Oracle Enterprise Communications Broker, Oracle Enterprise Manager Base Platform, Oracle Enterprise Manager for Fusion Middleware, Oracle Enterprise Operations Monitor, Oracle Essbase, Oracle Financial Services Analytical Applications Infrastructure, Oracle Financial Services Behavior Detection Platform, Oracle Financial Services Compliance Studio, Oracle Financial Services Customer Screening, Oracle Financial Services Enterprise Case Management, Oracle Financial Services Lending and Leasing, Oracle Financial Services Model Management and Governance, Oracle Financial Services Regulatory Reporting, Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition, Oracle Financial Services Transaction Filtering, Oracle FLEXCUBE Enterprise Limits and Collateral Management, Oracle Fusion Middleware, Oracle Global Lifecycle Management OPatchAuto, Oracle GoldenGate, Oracle GoldenGate Big Data and Application Adapters, Oracle GoldenGate Stream Analytics, Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, Oracle Graph Server and Client, Oracle Hospitality Cruise Shipboard Property Management (SPMS), Oracle HTTP Server, Oracle Hyperion Infrastructure Technology, Oracle Identity Manager, Oracle Identity Manager Connector, Oracle Insurance Policy Administration J2EE, Oracle Insurance Policy Administration Operational Data Store for Life and Annuity, Oracle Java SE, Oracle Life Sciences Empirica Signal, Oracle Life Sciences InForm, Oracle Managed File Transfer, Oracle Middleware Common Libraries and Tools, Oracle NoSQL Database, Oracle Outside In Technology, Oracle Product Lifecycle Analytics, Oracle REST Data Services, Oracle Retail Assortment Planning, Oracle Retail Bulk Data Integration, Oracle Retail EFTLink, Oracle Retail Extract Tranform and Load, Oracle Retail Financial Integration, Oracle Retail Fiscal Management, Oracle Retail Integration Bus, Oracle Retail Merchandise Financial Planning, Oracle Retail Merchandising System, Oracle Retail Predictive Application Server, Oracle Retail Price Management, Oracle Retail Service Backbone, Oracle Retail Warehouse Management System, Oracle Retail Xstore Point of Service, Oracle Security Service, Oracle SOA Suite, Oracle Solaris, Oracle TimesTen In-Memory Database, Oracle Tuxedo, Oracle Utilities Application Framework, Oracle Utilities Live Energy Connect, Oracle Utilities Network Management System, Oracle Utilities Testing Accelerator, Oracle VM VirtualBox, Oracle Web Services Manager, Oracle WebCenter Forms Recognition, Oracle WebCenter Sites, Oracle WebLogic Server, PeopleSoft Enterprise CC Common Application Objects, PeopleSoft Enterprise CS Student Records, PeopleSoft Enterprise FIN Contracts, PeopleSoft Enterprise FIN Maintenance Management, PeopleSoft Enterprise FIN Project Costing, PeopleSoft Enterprise HCM Absence Management, PeopleSoft Enterprise HCM Human Resources, PeopleSoft Enterprise HCM Shared Components, PeopleSoft Enterprise PeopleTools, PeopleSoft Enterprise SCM Purchasing, Primavera P6 Enterprise Project Portfolio Management, Primavera Unifier, Siebel Applications, and Sun ZFS Storage Appliance Kit.
Apple released updates for iOS 15.8.8, 16.7.16, 18.7.8, 18.7.9, 26.4.2, 26.5, iPadOS 15.8.8, 16.7.16, 17.7.11, 18.7.8, 18.7.9, 26.4.2, 26.5, macOS Sequoia 15.7.7, macOS Tahoe 26.5, tvOS 26.5, and watchOS 26.5. This includes security updates. Use Apple Software Update to install the most current versions.
iOS 15.8.8, 16.7.16, 18.7.8, 18.7.9, 26.4.2, 26.5 are security updates. Use Settings, General, Software Update to install the most current update.
iPadOS 15.8.8, 16.7.16, 17.7.11, 18.7.8, 18.7.9, 26.4.2, 26.5 are security updates. Use Settings, General, Software Update to install the most current update.
watchOS 26.5 is a security update. Use the Watch app on your iPhone to install the most current version.
tvOS 26.5 is a security update. Use System, Software Update to install the most current version.
Google ChromeOS 147.0.7727.147 and ChromeOS LTS 144.0.7559.250 are security updates. Use Menu, Help, About to install the most current version. A reboot is required.
Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.
Important Notes
Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.
The release of macOS Tahoe (26.x) means that macOS Ventura (13.x) and older are no longer supported. If you can not install at least macOS Sonoma (14) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.
Windows 10 (all consumer versions) is end of life (EOL). All non-LTS versions of Windows 10 without ESU are now out of support, with the sole alternatives being to upgrade to Windows 11 or enable Extended Service Updates (ESU). If you aren’t sure whether you are using LTS, you aren’t. Enable the ESU now.
The current release of the Windows 11 (v25H2) is very large (30% larger than any previous release) so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.
Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.
Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.
It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, drivers for hardware you’re not using (like old printers), and games you do not actually play.
Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available.
Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com
Driver Updates
If you’re using this hardware – these updates are for you.
Daemon Tools Lite 12.6.0 is a security update.
Epson XP-410 7.60.00 is a security update.
Epson XP-430 2.60.00 is a security update.
Logi Options+ 2.3.879545 resolves several bugs. This is not a security update.
Plustek ePhoto Z300 6.7.0.8 improves performance and resolves several bugs. This is not a security update.
TP-Link Archer AX72 v1.60 260112 is a security update.
UniFi Network Server 10.3.58 resolves several bugs. This is not a securtiy update.
VIISAN OfficeCam 7.2.15 doesn’t provide a change log so should be treated as a security update.
Xerox Smart Start 2.5.7.0 doesn’t provide a change log so should be treated as a security update.
Browser Updates
One or more of these are likely to be of interest to everyone.
Brave 1.90.121 is a security update.
Firefox 150.0.3 is a security update.
Firefox ESR 140.10.2 is a security update.
Google Chrome 148.0.7778.96 is a security update.
Microsoft Edge 148.0.3967.54 is a security update.
Vivaldi 7.9.3970.64 is a security update.
Email Updates
One or more of these are likely to be of interest to everyone.
DavMail Gateway 6.7.0 resolves several bugs and improves integration. This is not a security update.
Mailspring 1.21.0 is a security update.
Spark 3.29.0.138708 doesn’t provide a detailed change log so should be treated as a security update.
Spark (macOS) 3.29.0.138707 doesn’t provide a detailed change log so should be treated as a security update.
Thunderbird 150.0.2 is a security update.
Internet Updates
One or more of these are likely to be of interest to everyone.
AnyDesk 9.7.3 resolves several problems with AnyDesk One, cli syntax and stability. This should be treated as a security update.
BrowsingHistoryView 2.61 adds option to save all. This is not a security update.
curl 8.20.0 improves threading and resolves hundreds of bugs. This should be treated as a security update.
Discord May 4, 2026 resolves over a hundred bugs, improving stability, performance, and reliability. This is not a security update.
Dropbox 250.4.3245 no longer provides a change log so should be treated as a security update.
FileZilla Client 3.70.5 is a security update.
FileZilla Server 1.12.6 is a security update.
Google Drive 125.0 resolves several bugs and improves performance. This is not a security update.
MeshCentral 1.1.59 resolves several bugs. This is not a security update.
Nextcloud Server 33.0.3 updates libraries and resolves dozens of bugs. This is a security update.
Npcap 1.88 improves compatibility and resolves a couple bugs. This is not a security update.
Qbox 4.0.5.90 doesn’t provide a change log so should be treated as a security update.
Rclone 1.74.1 is a security update.
Signal 8.9.1 doesn’t provide a detailed change log so should be treated as a security update.
Signal (Android) 8.9.1 doesn’t provide a detailed change log so should be treated as a security update.
Syncthing 2.1.0 adds GUI grouping, improved proxy support, block index controls, ands resolves over a dozen bugs. This is a security update.
Technitium DNS Server 15.2 is a security update.
Telegram 6.8.2 “improves” AI integration, improves startup time and reliability, and resolves several bugs. This is not a security update.
Tigase Server 8.4.1 doesn’t provide a publicly accessible change log so should be treated as a security update.
USB Drive Log 1.15 resolves a cosmetic bug. This is not a security update.
Media Updates
These are unlikely to be of interest to most people.
Bitwig Studio 6.0.6 improves hardware support and resolves several bugs. This is not a security update.
Grayjay 387 updates installer. This is not a security update.
KaraFun Player 3.12.0 improves cosmetics. This is not a security update.
Game Updates
These are unlikely to be of interest to most people.
Minecraft Server (Bedrock) 1.26.20.5 doesn’t provide a change log so should be treated as a security update.
PS5 2026.504 adds emojis and improves usability. This is a security update.
Steam 2026.05.08 adds support for newer hardware, improves battery notifications, and resolves several bugs. This is not a security update.
SteamOS SteamDeck Update 2026.05.10 is a security update.
Office Updates
One or more of these are likely to be of interest to most people.
Adobe Reader DC 26.001.21529 is a security update.
Adobe After Effects 25.6.5 and 26.2 are security updates.
Adobe Commerce 2.4.4-p18, 2.4.5-p17, 2.4.6-p15, 2.4.7-p10, 2.4.8-p5, and 2.4.9 are security updates.
Adobe Commerce B2B 1.3.3-p18, 1.3.4-p17, 1.4.2-p10, 1.5.2-p5, and 1.5.3 are security updates.
Adobe Connect 2026.3.125 is a security update.
Adobe Connect (macOS) 2026.01.39 is a security update.
Adobe Content Authenticity JS SDK 0.7.1 is a security update.
Adobe Content Authenticity Rust SDK 0.80.1 is a security update.
Adobe Illustrator 2025 29.8.7 is a security update.
Adobe Illustrator 2026 30.4 is a security update.
Adobe Media Encoder 25.6.5 and 26.2 are security updates.
Adobe Premiere 26.2 is a security update.
Adobe Premiere Pro 25.6.5 is a security update.
Adobe Substance 3D Designer 16.0.1 is a security update.
Adobe Substance 3D Painter 12.0.3 is a security update.
Adobe Substance 3D Sampler 6.0 is a security update.
Audiate 2026.2.1 resolves a crash and other bugs. This is not a security update.
Calibre 9.8.0 resolves several bugs. This is not a security update.
GIMP 3.2.4 resolves several bugs. This is a security update.
ImageMagick 7.1.2-21 updates libraries and resolves over a dozen bugs. This is a security update.
Inkscape 1.4.4 resolves dozens of bugs and improves performance and stability. This is not a security update.
Kindle for PC 2.9.71006 doesn’t provide a change log so should be treated as a security update.
Magento Open Source 2.4.6-p15, 2.4.7-p10, 2.4.8-p5, and 2.4.9 are security updates.
Manager 26.5.12.3585 adds several new features including raw HTML and custom fields support. This is not a security update.
Nextcloud Desktop 33.0.4 resolves several bugs. This is not a security update.
Notepad++ 8.9.5 resolves several bugs. This is a security update.
PDF-XChange Editor 10.8.5.410 is a security update.
Operating System Updates
These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.
Bazzite 44.20260511 is a security update.
ChromeOS 147.0.7727.147 is a security update.
iOS 15.8.8, 16.7.16, 18.7.9, 26.4.2, and 26.5 are security updates.
iPadOS 15.8.8, 16.7.16, 17.7.11, 18.7.9, 26.4.2, and 26.5 are security updates.
macOS Sequoia 15.7.7 is a security update.
macOS Tahoe 26.5 is a security update.
tvOS 26.5 is a security update.
watchOS 26.5 is a security update.
Zorin OS 18.1 improves performance, added hardware support, and resolves several bugs. This is not a security update.
Security Software Updates
One or more of these is likely to be of interest to most people.
Chainsaw 2.16.0 adds a summarizer for EVTX and resolves several bugs. This is not a security update.
HTTP Toolkit 1.26.0 doesn’t provide a change log so should be treated as a security update.
KeePass 2.61.1 resolves several bugs. This is not a security update.
OpenSSL 4.0.0 is a security update.
ProtonVPN 4.3.14 adds exclusion options and updates libraries. This is not a security update.
RogueKiller 16.6.1 adds support for ARM64 and improves user interface. This is not a security update.
Stinger 26.04.16.2 adds support for new detections. This is not a security update.
uBlock Origin 1.71.0 resolves several bugs and adds new filters. This is not a security update.
Capture Updates
These are unlikely to be of interest to most people.
Camtasia 2026.1.2 is a security update.
Open Broadcaster Software 32.1.2 resolves several bugs. This is not a security udpate.
SnagIt 2026.2.1 is a security update.
Converter Updates
These are unlikely to be of interest to most people.
BookFab 1.2.3.0 improves compatibility and resolves several bugs. This is not a security update.
DVDFab 13.0.6.0 adds support for new hardware and improves compatibility. This is not a security update.
IsoBuster 5.8 adds support for new formats and improves detection and support for existing formats. This is not a security update.
StreamFab 7.0.2.4 improves compatibility and resolves several bugs. This is not a security update.
UniFab 4.1.0.3 resolves several bugs. This is not a security update.
Education updates
One or more of these are likely to be of interest to most people.
Zotero 9.0.3 resolves several bugs. This is a security update.
Utility Updates
These are unlikely to be of interest to most people.
1Password 8.12.12 improves compatibility. This is not a security update.
7-Zip 26.01 adds generated output path support and huge pages on linux. This is not a security update.
Autoruns 14.2 adds support for packaged apps. This is not a security update.
Bitwarden 2026.3.1 resolves several bugs. This is not a security update.
CCleaner 7.07.1313 improves performance and resolves several bugs. This is not a security update.
ControlMyMonitor 1.41 improves compatibility and resolves a couple bugs. This is not a security update.
Cygwin 3.6.9 resolves several bugs. This is not a security update.
DesktopOK 12.51 resolves several bugs. This is a security update.
dnGrep 4.7.25.0 updates libraries, improves Everything integration, and resolves a couple bugs. This is a security update.
Etcher 2.1.5 updates tests. This is not a security update.
Everything CLI 1.1.0.37 resolves several bugs and improves UTF8 support. This is not a security update.
FoneTool 3.6.0 resolves several bugs. This is not a security update.
GoodSync 12.9.29 improves integration. This is a security update.
HDD Raw Copy 2.6 doesn’t provide a change log so should be treated as a security update.
Homedale 2.24 improves OUI handling. This is not a security update.
IsMyHdOK 4.55 improves compatibility. This is not a security update.
MAS 3.11 adds detections. This is not a security update.
NTLite 2026.5.11004 resolves several bugs. This is not a security update.
osquery 5.23.0 adds several new detections and improves performance. This is a security update.
PointerStick 7.11 improves compatibility. This is not a security update.
PowerToys 0.99.1 resolves several bugs and improves stability. This is not a security update.
Process Explorer 17.12 adds a parent PID column and resolves a stability bug. This is not a security update.
Process Monitor 4.02 improves scrolling support, adds millisecond timers, and resolves several API mismatches. This is not a security update.
RoboForm 9.9.4 improves RDP compatibility and resolves several bugs. This is not a security update.
Rufus 4.14 adds options to better control user experience, UEFI improvements, and resolves several bugs. This is not a security update.
Synergy 1.20.1 is a security update.
Synergy 3.6.1 is a security update.
Ventoy 1.1.12 improves compatibility. This is not a security update.
WinGet 1.28.240 updates libraries and resolves dozens of bugs. This is not a security update.
Winhance 26.04.21 improves scroll support, adds integration with AHK, and resolves several bugs. This is not a security update.
WinRAR 7.22 resolves several bugs. This is not a security update.
WinScan2PDF 9.69 improves compatibility. This is not a security update.
WizFile 3.15 resolves a bug in date filtering. This is not a security update.
XnConvert 1.111.0 adds filelist support. This is not a security update.
ZoomIt 12.0 adds webcam overlay support and appending clips in editor. This is not a security update.
Developer Updates
These are unlikely to be of interest to most people.
.NET Runtime 10.0.7 is a security update.
AutoHotkey 2.0.26 resolves several bugs. This is not a security update.
GadgetPack 42.0 resolves several bugs. This is not a security update.
GDevelop 5.6.269 adds spot light and point light objects, resolves a dozen bugs and improves defaults. This is not a security update.
GitHub Desktop 3.5.8 is a security update.
Go 1.26.3 is a security update.
Java 8u491 is a security update.
Node.js 26.1.0 updates libraries and resolves over a hundred bugs. This should be treated as a security update.
Node.js 24.15.0 updates libraries and resolves over a hundred bugs. This should be treated as a security update.
Python 3.14.5 is a security update.
Rust 1.95.0 resolves several bugs and implements new macros for configuration support. This is not a security update.
SpaceSniffer 2.2.0.27 resolves several bugs.
SQLite 3.53.1 improves stability. This is not a security update.
Visual Studio Code 1.119 is a security update.
WinMerge 2.16.56 resolves several bugs and improves compatibility. This is not a security update.
ZoomText 2025 2025.2508.49.400 resolves a stability bug. This is not a security update.
ZoomText 2026 2026.2603.111 improves shared computing experience and resolves a stability bug. This is not a security update.
Virtual Machine Updates
These are unlikely to be of interest to most people.
VirtualBox 7.2.8 resolves over a dozen bugs. This is a security update.
Web Package Updates
These are likely to be of interest only to web developers.
Coppermine Gallery 1.6.29 is a security update.
MailEnable 10.57 improves reliability and resolves several bugs. This is not a security update.
https://www.mailenable.com/
MailEnable 9.90 improves reliability and resolves several bugs. This is not a security update.
Piwigo 16.4.0 is a security update.
SmarterMail 9623 improves compatibility and resolves over a dozen bugs. This is not a security update.
Antispam Bee 2.11.11 adds a new spam detection pattern. This is not a security update.
My Sticky Bar 2.8.9 improves reliability. This is not a security update.
Sucuri Security 2.7.2 resolves several bugs. This is not a security update.
WP Mail SMTP 4.8.0 is a security update.
That’s all for now folks. Keep it clean out there. 😉
Regards,
Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/