Welcome back, Folks!
Today is Patch Tuesday for June, 2026.
If your Windows 10 computer can not be upgraded to Windows 11 then you should either replace your device or use the Windows 10 ESU program to get another few months out of it.
Windows 11 25H2 is now available and Windows 11 23H2 and older are no longer supported. It’s safe to upgrade to Windows 11 25H2 now, but be prepared for the Start Menu to change. You will likely want to click the “View” drop-down and switch to List.
macOS 26 Tahoe is now available and macOS 13 Ventura and older are no longer supported. macOS 26 is now stable and you should upgrade to this version if your hardware supports it.
People harp on me sometimes about having to do updates. This month is a perfect demonstration of why they’re so important. Almost every browser in the world addressed over six hundred (600!) security vulnerabilities EACH in the last 30 days. Several of the vulnerabilities were reported over two years ago and one was reported over six years ago. Updates are important.
There were 1190+ major hacks, and over 490 application updates this month. It’s a huge month, with about 6.5 GB of updates for most users.
This Month in Technology
There were over 1190 major hacks this month (click to expand).
3E Accounting, 3I INFOTECH, 7-Eleven, A Roettgers, A-Sonic Logistic Solutions, A.R.Ge.Co, ABP Autoricambi, Abrigo, AcademyHealth, Acadia Healthcare Company, ACAM Systemautomation, ACC Construction, Access Dental & Orthodontics, ACE Hospital & Research Centre, Acer Wave 7 routers, ACIL, Activ Interim 88, Acton Electrical, Adams County Memorial Hospital, Addi, Adensa Technology, ADLAN Corporation, Advanced FreePBX, Advanced Health, Advanced Medical Consultants, Advanced Psychiatry Associates, AdvancedHEALTH, African National Congress, Agro Export Avocados, AgroExport Internacional SA de CV, AHCPL, Air Conditioning Florida, AJJ Echave Turri, AKM Enterprises, Alamo Heights School District, Alkaloid AD Skopje, Alkegen, All in One Video Downloader, Allele Diagnostics, Alliance Adjustment Group, Almerys, Alpert Slobin & Rubenstein, Alpha Group Holdings, Alpha Health Care, Alpine Aerotech, AMACCAO Group, Amazon app, AME Manufacturing, American Battery Factory, American Lending Center, Ameriprise, Ampex Data Systems Corporation, Amplify Technology, Amstel Securities, Anandji Haridas, Andalusia Country Club, Annuaire des Entreprises, Anthropic Claude Code, Anthropic Claude Desktop, Apache ActiveMQ, Apache HTTP Server (HTTP/2 Bomb), Apache OFBiz, Apex Maritime, AppDirect, Apple, Apple Safari, Arabian Procession Holding, Arc Reinsurance Brokers, Arch Linux (PinTheft), ARGeCo, Arm Whois, Arpinet, Arsenal Scaffold, Artso International, Arwini, Ashcroft Homes, Ashley Timber, ASIA STRATEGIC, Asian Lite International, Asopagos SA, Aspire Hospitals, Assemblies of God Wa Wai Church Limited, ASUS Business Manager, Atlas Menu, Atrium Health Navicent, Australian Centre for the Moving Image, Australian College of Business Intelligence, Australian Medical Council, Australian Parliament, over 900 automatic tank gauge (ATG) systems, Avanti Windows & Doors, AVBOB, Avcon Jet, Ayuntamiento de Valdemoro, Azerbaijani Energy, B Care Medical Center, Badan Pangan Nasional, Baker Distributing, Banco Bilbao Vizcaya Argentaria (BBVA), Bangkok Metropolitan Administration, Bangor Wholesale Laminates, Inc, Bank Negara Indonesia, Barclay Damon, Barnhart Crane & Rigging, Basata Holding for Financial Investments, BASE SPA, Based Apparel, BAUM Games, BAYTECH A/S, BC3 Tecnologia, BCare Medical Center, BCD Travel, Beacon Mutual Insurance, Belambra, Belgrade School District, Belimed, Belmont Aesthetic & Reconstructive Plastic Surgery, Belz Institutions, Ben F. Barcus and associates pllc, Bergen Community College, BerlinMobil Frank Richert, Bestat Pharmaservices Corp, BGF Networks, Bideawee, BinDawood Holding, Bitdefender Napoca, Blue Teal Holdings, LLC, Bluize, BMJ Paperpack, Bodynits BIHQ Pte Ltd, Bomco, Bonick Landscaping, Boston Capital Holdings LP, Bouri Group, Boys & Girls Club of the Northern Plains, Bracknell Printroom Limited, Bradley Law Personal Injury Lawyers, Braincell Machines Technologies, Brand X Hydrovac Services, Branded Products, Bresme Madrid, Brian Jessel BMW, Bridle Trails Family Dentistry, British Airways, Bronsky Orthodontics, Bronsky Orthodontics, BSynchro, Buckeye Paper, Budget Saudi, Buenos Aires Software, Buffalo Niagara Convention Center, Business Publications Corporation, Business Record, C2N Diagnostics, Cablematic Dos Mil SLU, Caesars Entertainment, Caka Grup Lojistik, Cambridge Law Chambers, Cambridge Mobile Telematics, Camiers, Canada Life, Capital Family Physicians, Capitol Pain Institute, Cardinal Services, Carnival Corporation, Carton Craft Supply, Casa Safer, Casino Gaming Commission, Cavalier Flooring Systems, Cedar Street Capital, CenterWell, Central Arkansas Pediatrics, Central Board of Secondary Education (CBSE), Central Florida Cosmetic & Family Dentistry, Central Romana, Certus Agente de Seguros y de Fianzas, CESP, CGCSA, CH Karnchang, Challenge Manufacturing, Champaign-Urbana Public Health District, Chanhassen Dinner Theatres, Charter Communications, ChatGPT, Check Point Mobile Access, Check Point VPN, Checkmarx Jenkins AST, Cherokee Distributing Co, ChromaDB, Chuo Acupuncture and Osteopathic Clinic, Cidesa, CISA, Cisco Catalyst SD-WAN Manager, Cisco Secure Workload, Cisco Unified Communications Manager, City of Port Hueneme, City of York Council, CJ Architects, CJ Group, Clarinda Regional Health Center, Cline, Clinica Avellaneda Medical Center, Clinica Maitenes, Cloudflare Pingora (HTTP/2 Bomb), CMD Outsourcing Solutions, CoinMate, Cold Front Distribution, Colina Financial Advisors, Columbia Orthopaedic Group, Colégio Santo Inácio, Comercial Echave Turri, Common Part Groupings, Commune De Camiers, Community Bank, Community Connections, Community Resource Services, Comodo Internet Security, Compact Mould Ltd, Computime Group, ConsulTIC, Copamex, Corient Services, Corley Manufacturing, Cornick, Garber & Sandler, Corporacion Prokompra, Cresset Capital, Crit Tunisie, Cropwise (Syngenta Group), CTPS, CS Insurance, CST Industries, CTT, Cullen/Frost, Cunningham Prosthetic Care, Cursor AI, Cushman & Wakefield, Custom Sign and Engineering, CUSTOMSIGN, Cyuou, CZ Collections, D&M Contractors, Dado Lighting, Daegu University AI Department, Dalbir Singh & Associates, Dallis Law Firm, Danzo Group, Dashlane, DatingBuzz, DBR & CO, DD-WRT, De Waard Transport, Deandra Grant Law, DECUSA, Defense is Ready, Delano Schools, Delbrook Capital Advisors, Dell ThinOS, Demand.io, DentaQuest, Denton Calvary, Denton Law Firm, Design Engineering & Consulting, Deutsche Telekom, DEVO-Tech, DFI AMERICA, LLC, Digiprint, DiGiTALL GRAPHICS, Dillon Family Medicine, Diretrixon Tecnologia da Informacão Ltda, Distrigaz Vest, Diversified Fall Protection, Inc, Dobarro and Pichel, Docker Desktop, DocketWise, Dodson & Horrell, Dolphin Manufacturing, Domaine Des Tournels, Don Bosco Technical Institute of Makati, Don Don, Dos Ocho Automóvil, Downriver Medical Associates, Dragonica Lunaris, Drs. Abdelbaky, Boes, Cameron & Associates of Cary Park, PLLC, Drs. Abdelbaky, Boes, Cameron & Associates of Wake Forest, PLLC, Drupal, Dräger Protector Software, DSD Law Firm, Dubois Agrinovation, Dunas Groen, Dunsguide, Durand-Wayland, DXON, E Control Systems, Easy Dynamics, Eat Salad, ECCI, Echo Protocol, Edgewood Surgical Hospital, Edmunds, Educational Employees Credit Union, Edwards, Faust & Smith (EFS), EITEC PRO, Ekblad, Pardee & Bewell, Elara Caring, Electroban SAE, Ellucian PowerCampus Warning, Elohim Law Corporation, Elumax, EMEK Elektrik Endüstrisi AS, Emmys, Empresa Constructora de Ciudades Inteligentes Srl, Empresas Públicas de Medellín ESP, Empty, Engineered Transportation International, Enjin, Enns & Company Professional, EnTrans International, LLC, Envoy (HTTP/2 Bomb), EPB Insurance, ЕРМ, Equinix Incorporated Group Health and Welfare Benefit Plan, Erasmus University, ERH Communications, Erie Family Health Centres, Eriell Group, ERMI LLC, Estrela Aviamentos, ETM Electromatic, Evanston Township High School, Everest Ito, Everlite concept, Eversource, EXCEED Energy, Excelas, Exchange Group, Exim, ExpoCredit Financial Group, Extant Aerospace, Fab-Masters, Fabbrica, Factors Western, Fall Protect, Family Health Centers of San Diego, Family Medical Associates of Raleigh, Fana Jewelry Inc, FANASA, Fargo Moorhead West Fargo Chamber, FESCO Adecco, FFmpeg, Fibrenoire, Fidelity United, Filabé, Financial Foundations, Fintech Holdco, First Advantage, First Mutual Holdings, First VPN, FirstClass, Florida Air, Florida Reliability Coordinating Council (FRCC), Fluke Corporation, FlySafair, FMRS Health Systems, Focus Design Partners, Fonderia Corra, Fong, Ko & Associates LLP, Foot Solutions, Fortinet FortiAuthenticator, Fortinet FortiClient Enterprise Management Server (EMS), Fortinet FortiSandbox, Fox Rothschild LLP, Fox Valley Tax Solutions, Foxconn, France’s Groupe IMA, Frost Bank, Fruits Queralt, Fulcrum Real Estate, Function Enterprises, Funke Scheid, FWMK Law Offices, G Theodor Freese, Gainwell Technologies, Gallun Snow Associates, Garrisonville Dental LLC, Gartengestaltung Muller eU, Gastro Health, Gastroenterology & Hepatology of CNY, Gay & Lesbian Community Services Center of Orange County, General Directorate of Land Registry and Cadastre, General Doors, Generation Life Limited, German University Hospitals (Unimed), Geske Haus und Versorgungstechnik, Gestordes, GeTeCe, GGroup CPAs, Ghost CMS, Gitea, GitHub, over 3,800 GitHub repositories, Gitis, Glendora Surgery Center, Global Retool Group, Gnosis Pay, Gogs, GoKids! Mobile, GoKids! Publishing, Goldberg Coins & Collectibles, Inc, Goldklang Group CPAs, Goldlion Holdings Limited, Gone Fishin’ Marine, Goodstone Group, Google Chrome, Google Chrome for macOS, Gorey Community School, Governata, Grafana, Gravity Bridge, Green Resource, Greenway Technologies, Gregory Jewellers, GRIP Outreach For Youth, Groupe Crit, Groupe MBM, Groupe SETCAR, Groupe Sécurité CLB, Grupo 55, Grupo Alvorada, Grupo LTZ, Grupo Mauá, Grupo Mezta, Grupo Palmero, Grupo Pasquel, Grupo Petersen, Grupo Premier, GS Yuasa Lithium Power, GTF Freese, GW Mechanical, Gîtes de France, Gürsoy Grup, Hahn Loeser and Parks, Hal Otey Financial, Hamer Childs, Hamister Group, Hansoll Textile, Harbor Regional Center, Harrell Martin Peace, Harrell, Martin & Peace, Harrison County Commission, WV, Hartford HealthCare, Hautarzt Budihardja, Hautarztpraxis Dr Budihardja, Hawaii Employers’ Mutual Insurance Company (HEMIC), HDFC Asset Management Company, Healthcare in Action, Healthtrax Fitness and Wellness, Heartland Growers, Helios, Helix International, Henry Broch Foods, Henry Molded Products, Hermes WebUI, HGS WT, Hightower Communications, Hodozuka-Setsubi Co, Ltd, Hokkaido Medical Center, Hola Browser, Holland Bulb Farms, Hop Long Tech, Hospecs, Hospice Savannah, HostBooks, Hotelogix Company, Houston Eye Associates, Hoy Construction, HRC Sicherheitsdienste, Huashan, Huawei enterprise routers, HumanEdge, Hunter Web Services, Huse Incorporated, Husky Health Connecticut, Hussey Seatway, HWG & Acros Sport, IBENA Textilwerke, IBM iAccess, IBM WebSphere, IDS Group, IDS Group, Inc, iFood, IKEA, Ikron Corp, IMA Diligence Services, IMMI, Implosa, Indian Creek Valley Water Authority, Indian Institute of Technology (IIT) Roorkee, Indiana Mills and Manufacturing, Industrial Acceptance Corporation, Industrial Química Lasem, SAU, Infoworld Membership Systems, Ingelan Local Area Network Engineering SL, INSA-INDELMA, Instagram Recovery Tool, 20,225 Instagram accounts (via Meta’s own AI), Institucion Cervantes, Institute of Private Enterprise Development, Institute of Public Accountants (IPA), Instituut voor de Nederlandse Taal, INTEC Engineering, Integrated Distribution, Integrated Process Engineers & Constructors., Interim HealthCare of Lubbock/Amarillo, Interim Healthcare of West Texas, Internal Medicine and Pediatrics of Cullman, Internal Medicine of Southwest Florida, Internet Technologies Designs, InterSPA Grouppe, Interstate Management Company, LLC, Interstate Roofing, IP Rings, IQL NOG, Ira & Larry Goldberg Coins & Collectibles, Irestal Group, Isuzu Motors, Ivanti Endpoint Manager, Ivanti ITSM, IWC Food Service, JAKN Network Support & Services, Jay’s Catering, Jazz Hipster, JC Ripberger Construction, JDownloader, JEC Eye Hospitals and Clinics, JEE Advanced, Jeffrey Burr Law Firm, Jens Jensen, Jichasa Global Logistics, JingDong JD Cloud Box AX6600, JNP ENG, John G Yphantides, Johnson Carter Architects, Johnson-Peltier Electric, Joomla, Juventus, Jyharn Electronic, K Smart Associates, K-APEX Maritime Co, Kabushiki Gaisha Hodozuka Setsubi, Kaplan Companies, Karlin Foods, Karnes Legal Services, Katholiek Amersfoort, Kelm and Reuter, Kemper, Kennedy McLaughlin, Kennon Worldwide, KerberRose, Kinetic Education, KLM, KnowledgeDeliver, Koa Glass, Kriete Truck Centers, Krum Public Library, Kunal Enterprises, L&P Aesthetics, La Familia Adult Day Center, La Perouse, La Sevillanita, LA Woodworks, Lab Express, LAFJ, Lake Washington School District, Lakewood School District, Landeshauptstadt Stuttgart, Landesinnungsverband für das Bayerische Elektrohandwerk, Landkreis Limburg-Weilburg, Lansing Community College, Laravel, Larick Towing, Las Lomitas Elementary School District, Lauterbach Speditions-GmbH, Lawants, SL, LBR Engenharia, LCNet, Le Pain Quotidien, Le Perreux sur Marne, Lead Company (Leadership Boulevard), Lee Law Offices, Legend Networking & Telecom, Legend North Trucking, LeRoy Surveyors & Engineers, LG TVs, LifeSpring Home Care, Line.me, Linux (CIFSwitch, DirtyDecrypt, Fragnasia), LiteLLM, LiteSpeed, Lithuania’s Migration Department, Liztex Guatemala, LM Studio, LoneStar Truck Group, Louisiana Cat, LTI Services and Larick Towing, LTJ Industrial Services, LTZ Comércio de Produtos Online Ltda, Lumax International Corp, Ltd, Lumexa Imaging, Lumio Dental, Lusamerica Foods, Lyrion Music Server, M Rocha & J Serra, M&M Group, M. Rocha & J. Serra, macOS, Main Street Research, Mainstreet Organization of REALTORS, Mairie Thiverval Grignon, Majlis Perbandaran Alor Gajah, Malaysia Smelting, Manager on Call, Manhattan Broadcasting, Manzil, Marimo, Mariner Wealth Advisors, MarketJoy, Marshall Dennehey, Martinez & Shanken, Maschinen Stockert, Maximum Mold, LLC, Mayelia Automotive, Mayer, Mays Housecall, MBM Corp, McCarthy Inc, McDonald’s France, Mecanizados y Montajes Aeronáuticos, Medenet Inc, Medi-Rents, Media France, MediaArea MediaInfoLib, Mediapost Spain, Mediapost Spain, Meirc Training & Consulting, MEISA, Melbourne International Film Festival, MemberSource Credit Union, Menzies Group, Meta AI, Metalman Auto Limited, Metaval Consolidated, Metroply, Metropolitan Marine Maintenance Contractors’ Association (MMMCA), Michigan Surgical Center, MicroMarketing, Microsoft Azure, Microsoft BitLocker, Microsoft Defender, Microsoft Edge (more than four times!), Microsoft Exchange Server, Microsoft’s own GitHub (SEVENTYTHREE code repositories!), Microsoft IIS (HTTP/2 Bomb), Microsoft SharePoint, Microsoft Visual Studio (VS Code), Microsoft Visual Studio Code MCP servers, Microsoft Windows (MiniPlasma), Microsoft Windows 11, Microsoft Windows Message Queueing, Mid and South Essex NHS Foundation Trust, Mind Master Solutions, Mindpath College Health, Minecraft, Ministry of Finance and Budget, Ministry of Internal Affairs of the Republic of Armenia, Minsa, Mistral AI, MLS Now, Modern Display, Molinos Cabodi, Monero, Monir Precision Monitoring, Mopas Online Supermarket, Morning Star Tours, MotoFrenos, MoviePilot, MPAG, MR Drywall Services, MRS Holdings, MSC Group, MSHTA, Mt. Spokane Pediatrics, Muji, Musée du Bas-Saint-Laurent, My English House academy, MyPillow, Mytheresa, NACS, NaRaYa, NARIT, National Industries, National Louis University, National Standard Parts Associates, nebula-mesh, NEMD Architects, NetLine, Networking Technology, Neubox Internet, New York Life, Nextcloud, Nezha Monitoring, NGINX (HTTP/2 Bomb), NGINX (Rift), Nickey Kehoe, NJ Pain Care Specialists, NL Fisher, No-Cms, Nordfjord Hotell, Norfolk Constabulary, North Asia Corporate Services Limited, North Bridge Venture Partners, North Dallas Shared Ministries, Northern Mechanical Contractors, Northern Ohio Regional Multiple Listing Service, NorthWest Handling Systems, Northwest Woodworks, Northwoods Surgery Center, Notepad++, Nothing Technology, Nottingham Village, Nova Medical Products, Now-Forward, NR Engineering, NTN Bearing Corporation, NVIDIA, NVIDIA Container Toolkit, NVIDIA GeForce NOW, NVIDIA Megatron Bridge, NYC Health + Hospitals, NÛJINHA, Oaks Amusement Park, O’Brien Engineering, OdiBets, Odido, OEConnection, Ohio ENT & Allergy Physicians, Olipes, Ollama, Oncology Institute, One Legal, Ontario Home Builders Association, Open Door Health Center, OpenAI Codex, OpenBullet2, OpenClaw, Openmind Networks, Opera Comique, Oracle WebLogic, Oregon Department of Corrections, Oreka IT, Orem Eye Clinic, Oriental Diamond, Osool Poultry, Otthon Centrum, Oztug Otomotiv, P&G Trading, Palmero, Palo, Palo Alto Networks PAN-OS GlobalProtect, Palomar Health Medical Group, Pamil Modulsystem, Panasonic Avionics, Panorama BPO, Panorama Outsourcing SA, Papa Johns Egypt, Parcel Delivery, Parle Agro, Paroiciel, PARSA Beauty, PartsWarehouse, PATTA International Limited, PayTel, PB White & Co, PDC Bodynits, Pearson Ford, Pequod Associates, Perma-Chink Systems, Petroecuador, Peña & Bromberg, pfSense Firewall, phpBB, Pick n Pay, Pieralisi, Piller Aimmco Plastics, Pivot Health, Pixa Bank, Plan Communications, PlayStation, Plaza Home Mortgage, Plaza Lama, PlexSupply Inc, PNSB Insurance Brokers, Polyrack, Ponisch Abogados, Porter Wright, PortSwigger Web Security, Power & Telephone Supply Company, PowerCampus, Powerhouse Retail Services LLC, Practicus Limited, Pragmatic Solutions, PraisonAI, Preakness Healthcare Center, Premier Frutos de Calidad SA de CV, President Container Group, Printroom Group, Pro Farm Group Inc, Pro-MEC Engineering Services, Product AI Demandio, ProFarm Group, Profundo, Progress Software Kemp LoadMaster, Prologic Construction, Providence Medical Group, Proyectos y Mantenimientos Mecánicos, Eléctricos y de Instrumentación, PSB Sementi, PT Bank Negara Indonesia (Persero), Pulpdent Corp, Puma PROXY, Pyramid Management Group, Pönisch Abogados, Qatar National Broadband, QLS Group, Quahe Woo & Palmer LLC, Radiology Associates of Richmond, RADWAG, Raise the Bottom, Ramar Foods, Ramos Rheumatology, Rawaj Consumer Finance, RBH Aerospace Inc, RCI Internet Services, RCR Industrial Flooring, Recambios Generales del Automóvil Dosocho, Red Hat Enterprise Linux, Red-Line, Refreshment Systems, Reha Aktiv, Restorative Therapies, Revive Adserver, Ridge Law Firm, Rio Hondo Country Club, Ritta, Rivadeneyra Treviño, RK Parochie Onze Lieve Vrouw van Amersfoort, Robinsons Department Stores, Rochester Philharmonic, Rocket.Chat, Roland Machinery, Rolser, Roofing Solutions, Ross and Yerger Insurance, Roth Technik Austria, ROTO Immobilien, Round Hill Country Club, RTE Stucco LLC, SA2000, Sacramento County, CA, Saharuang, Salter HealthCare, Salvation Army, Samsung TVs, Sanatorio Delta, Sandox, Sanger Skilled Care, Sanli Pastore & Hill, SAP NetWeaver Application Server, SARL Canis Events Sécurité Privée, SatCom CX, Saver NV, SCB Group, Schacht Law Office, Schiphol, Schneebeli, School Facility Consultants, Schulte-Lindhorst, Schultz Operadora de Turismo, Seagull Software BarTender, SECONT Secretaria de Controle e Transparência, Secretaria de Controle e Transparência, Seeley Office Systems, SeeWriteHear, Semgrep, SEPPMail Secure E-Mail Gateway, Service Alimentaire 2000, Inc, SETCAR Group, SETS Solutions, SGS, Shajarpak Securities, Shanpoornam Metals, Shantou Huashan Electronic Devices, Shelly, Shepp Adviser, SHERIFF, Shipping Association of NY and NJ, Shocco Springs Baptist Conference Center, Shoreline Sightseeing, Shottermill Junior School, Shougang Hierro Perú, SICOL, Sid Harvey’s, Sidra Kuwait Hospital, Siemens Simcenter, Sierra Vista Hospital, Silergy Corp, Singing River, Sinomax USA, Sirilak Seafood, Sitefinity, SKUPINA Don Don, Smarty Arpinet, Smile Siam Printing Service, SmilePoint Dental Group, Smith & James, CPAs, Snyder Packaging, Società Produttori Sementi, SoFi, SOFT SEBA, Soja de Portugal, SolarWinds Serv-U, SolarWinds Web Help Desk, Somafix, SonicWall Gen6 SSL-VPN, Soniva Dental, Sony Music Center, Soraris, South Africa State Information Technology Agency (SITA), South African Revenue Service (SARS), a “South Korean electronics manufacturer,” Southern California University of Health Sciences, Southern Illinois Ob-Gyn Associates, Spain National Cybersecurity Institute (INCIBE), Spedition Kern, SPH Value, Spirit Medical Transport, Sponseller Group, Squamish Nation, Stafford Oral Surgery, Stahlwille, Stake DAO, Star Empire Group, StarBucks Company, Startec Group of Companies, Station Casinos, Stellar Health Group, Sterling Industries, Stonehenge Therapeutic Community, Strategic Education, Stride Learning, Stripe, Stuga Machinery, Suburban Water, Sumer Faktoring, Sun Life, Sunrise, Toscana Country Club, Andalusia Country Club, Surgery Center of Oak Ridge, Swim Mor Pools and Spas, Symetrics Industries LLC, Synex Group, T-Online, T/CCI Manufacturing, Tabiq, Taiko AG1000-01A SMS Alert Gateway, Taipei Municipal Chengde Elementary School, Taipei Municipal Chenggong High School, Takeda, Takosan Otomobil, Tampa Bay Dental, Tang Seng Nitrogen & Pump Systems, TanStack, Taos Mountain Casino, Taurus Investment, Tavola, Taylor Clay Products, TCCI Manufacturing, TE-LOH Germany, Techmar, Technic, Teledyne ETM, TeLoh, Texas Capital Bank, Texollini, Inc, Textile Testing Services of America, Textiles Liztex, The Banyans Health and Wellness, The Beacon Mutual Insurance Company, The Bradley Law Firm, The Chapel, The Clinic, The Gentlemen, The Goodstone Group, The Gravity Group, The Holy Name of Jesus Catholic Community, The Law Offices of Michael T Ridge, The Oncology Institute (over 100 clinics across several states), The Phia Group, LLC, The Salvation Army in Canada, The Sheppard Advisory, The Shepparton Adviser, The Taylor Provisions, ThorChain, Thoresen Thai Agencies, Thread Innovations, TinyMCE, TKGM, TME RUSTA Playland, Toscana Country Club, Toshiba, Total Recovery Resources and Coordination, Tower View Primary School, Town Car International, TP-Link Archer MR600, TP-Link Tapo C200, Transbras, TransferZ, Transitions Pro Centre Val de Loire, Transportes La Sevillanita Srl, Transportes y Logística Bras, TRANSSYSTEM Group, Trend Micro Apex One, TrendAI Vision One, Tress Sport & Lek AB, TRI-TEC Communications, Trican Well Service, Tricon Infotech, Trigon America, Trivantage, TRRAC, Trump Mobile, Trésor Public, TSG Enterprises, TSK Synergy, TTT Corporation, Tulane University, Tulip Mediworld, Turner Supply, TVING, TVN Media, UEI College, Ueno Fine Chemicals Industry, UK Visa Portal, Ultrahuman, Ungerer and Company, Uni China Group, UniFi OS, Unique Litho, Inc, United Auto Supply, United Medical Systems, United Nations’ World Food Programme (WFP), United Quality Cooperative, Universitas Nasional, University of Dallas, University of Finance and Administration, University Of Georgia, University of Michigan, University of Oxford, University of Valencia, Upper Township, NJ, URG OEM, Urschel Laboratories, US GovCloud, US Tiger Securities, UTour, Vacation Myrtle Beach, Vac Parts Warehouse, Vaculug, Value Exchange International, Van Tuijl, Vantage Egypt for Tourism and Entertainment, Vantage Energy LLC, VDM Trucking Service, Veda Consulting Company, Veg-Fresh Farms, Vega General Contractors, Verber Dental Group, Vernon & Ginsburg, Verus Bridge, Verzolla, Vial Agro, Vialis SAEM, ViaQuest Psychiatric & Behavioral Solutions, Vietnamese Department of Cybersecurity and High-Tech Crime Prevention, Villa Maria College, Villea (Attana Hotels & Resorts), Villea Port Dickson, Vimeo, Virta Health, Vision 3 Architects, Visual Studio Code, VMware Cloud Foundation Operations, VMware ESXi, Vodafone, VSP Security Wholesale, VSP Solutions, VVO Finance, Wahlap, Waveny Lifecare Network, Waypoint Business Solutions, WCM Remedium, WD Agroindustrial, Weckworth Manufacturing, Weil Gotshal, Wellpoint Washington, Inc., Wentworth Studio, Wentworth, Wessels Logistics, West Pharmaceutical Services, Western Orthopaedics, WG Neukölln, WholeHealth Chicago, Wiese USA, William Davis Homes, Windows Autopatch, Windows Netlogon, Windows Server 2025, Windows93/Myspace93, WinMTR, Winona County, MN, Wisconsin Waterfowl Association, WJ Wonjin Plastic Surgery, WNS Lowery, Wonjin Beauty Medical Group, Woodnova Packaging, WordPress Admin Columns plugin, WordPress All-In-One Security (AIOS) plugin, WordPress Augmented-Reality plugin, WordPress Avada Builder plugin, WordPress Background Image Cropper plugin, WordPress BookingPress Pro plugin, WordPress Burst Statistics plugin, WordPress Content Visibility for Divi Builder plugin, WordPress Easy Elements for Elementor plugin, WordPress Everest Forms Pro plugin, WordPress Funnel Builder plugin, WordPress GEO my WP plugin, WordPress Google Review Slider plugin, WordPress Gutenberg Essential Blocks plugin, WordPress Hippoo Mobile App for WooCommerce plugin, WordPress Hybrid Composer plugin, WordPress Kirki plugin, WordPress OTP Verification plugin, WordPress Plugin ad manager plugin, WordPress ProSolution WP Client plugin, WordPress Seotheme theme, WordPress Spectra Gutenberg Blocks plugin, WordPress The Simple History plugin, WordPress Travelscape theme, WordPress WP AutoSuggest plugin, WordPress WP Captcha PRO plugin, WordPress WP Maps Pro plugin, WordPress WP Travel Pro plugin, WordPress WP User Manager plugin, WordPress WPify plugin, World of Belz, WS Soluções Corporativas, WSM Accounting Services, WTI Transport, WWAG, Wysza Szkoa Biznesu National Louis University, Xchange Technology Rentals, XGenize LLC, XL Africa Group, Xorg X Server/Xwayland, Xsolis, XTR Global, XWiki, Yao Yuan Technology, YesWiki, YMCA of Columbia, Young & Company, Zachary Confections, Zapier, ZFG ALTHERM Engineering, Zuther Hautmann, Zywave, Öztuğ Otomotiv have reported hacking or compromises this month.
Microsoft Exchange Online, Microsoft MFA/MySignIn, Microsoft Office, Microsoft Teams, Tempo, and YouTube have suffered from outages this month.
Internet access throughout Azad Jammu, Iran, Iraq, Kashmir, and South Africa has been blocked our down for extended periods.
Last months updates broke Dell SupportAssist, Dozens of Windows drivers on millions of computers, Windows 11 updates, Windows Defender, and Windows driver update platform.
The Anthropic security AI that was “too dangerous” to make available because it found and created security exploits for previously unknown vulnerabilities in over ten thousand applications in its first month is now being offered to governments. Sure, they can be trusted.
Microsoft violated their own Windows Hardware Compatibility Program rules and force-installed old and insecure drivers across millions of computers this month.
TeamGroup has released a new external SSD that can be remotely wiped with a text message. The embedded always-on 4G chip is not so they can read your content. They promise.
Meta (the company that owns Facebook) has agreed to stop monitoring their employees for up to 30 minutes at a time on request. That’s okay, I’m sure that it won’t be used by evildoers to conceal their activities and put even more malware on the service.
Valve’s Steam platform was used to control over 2,000 infected WordPress sites.
Sony is blocking access to PlayStation for users of privacy-respecting operating system GrapheneOS.
Now for the good news:
“Government is in reality established by the few; and these few assume the consent of all the rest, without any such consent being actually given.”
— Lysander Spooner
Good or bad, the election is finally behind us.
Let’s Get Busy
Now back to our regularly scheduled program.
Patch Tuesday is huge this month. The typical computer should see roughly 6.5 GB in updates today. Let’s get started.
Microsoft released 83 updates to address 570 vulnerabilities in .NET, Active Directory Domain Services, ASP.NET Core, Azure HorizonDB, Azure Stack Edge, Copilot Chat, Function Discovery Service, GitHub Copilot and Visual Studio Code, HTTP/2, Linux MANA Driver, M365 Copilot, Microsoft Azure Attestation service and Device Health Attestation Service, Microsoft Azure Kubernetes Service, Microsoft Bing, Microsoft Copilot, Microsoft Defender for Endpoint, Microsoft Dynamics 365, Microsoft Exchange Online, Microsoft Exchange Server, Microsoft Graph, Microsoft Graphics Component, Microsoft Kinect, Microsoft Live Share Canvas SDK, Microsoft Office, Microsoft Office Click-To-Run, Microsoft Office Excel, Microsoft Office Project, Microsoft Office SharePoint, Microsoft Office Word, Microsoft PC Manager, Microsoft PowerToys, Microsoft Teams for Android, Microsoft UxTheme Library, Microsoft Windows DNS, Nuance PowerScribe, Office for Android, Remote Desktop Client, UI Automation Manager, Universal Plug and Play, Visual Studio Code, Windows Administrator Protection, Windows Ancillary Function Driver for WinSock, Windows Application Identity (AppID) Subsystem, Windows BitLocker, Windows Bluetooth Port Driver, Windows Bluetooth Service, Windows Boot Manager, Windows Collaborative Translation Framework, Windows Common Log File System Driver, Windows Cryptographic Services, Windows Deployment Services, Windows DHCP Client, Windows DHCP Server, Windows DWM Core Library, Windows Hotpatch Monitoring Service, Windows HTTP.sys, Windows Hyper-V, Windows Internet, Windows Kerberos, Windows Kernel, Windows Kernel-Mode Drivers, Windows Mark of the Web (MOTW), Windows Media, Windows Narrator Braille, Windows Network Controller Host Agent, Windows NT OS Kernel, Windows NTFS, Windows NTLM, Windows Performance Monitor, Windows Program Compatibility Assistant Service, Windows Projected File System Filter Driver, Windows Push Notifications, Windows RDP, Windows SDK, Windows Secure Boot, Windows Shell, Windows Storage, Windows TCP/IP, Windows Telephony Service, Windows UEFI, Windows Universal Disk Format File System Driver (UDFS), Windows Win32K – GRFX, Winlogon, and MSRT. This includes security updates. A reboot is required.
Apple released updates for iOS 26.5.1, macOS Tahoe 26.5.1, and Safari 26.5. This includes security updates. Use Apple Software Update to install the most current versions.
iOS 26.5.1 is a security update. Use Settings, General, Software Update to install the most current update.
Google ChromeOS 148.0.7778.250 and ChromeOS LTS 144.0.7559.254 are security updates. Use Menu, Help, About to install the most current version. A reboot is required.
Don’t forget to check your mobile devices, too! Many updates will also apply to your tablet, phone, kindle or television – so check your device-appropriate App Store and install updates.
Important Notes
Everything above this section should be checked by everyone on every computer. Chances are good that close to every single computer you touch will be affected by those updates. This is not the case with the items below, though you should still check each line item below to see if it applies to software you have installed.
The release of macOS Tahoe (26.x) means that macOS Ventura (13.x) and older are no longer supported. If you can not install at least macOS Sonoma (14) on your Mac then you should immediately remove your device from the Internet and use it offline only. It will no longer receive patches or updates and can now no longer be secured.
Windows 10 (all consumer versions) is end of life (EOL). All non-LTS versions of Windows 10 without ESU are now out of support, with the sole alternatives being to upgrade to Windows 11 or enable Extended Service Updates (ESU). If you aren’t sure whether you are using LTS, you aren’t. Enable the ESU now.
The current release of the Windows 11 (v25H2) is very large (30% larger than any previous release) so will take a long time to download on slower connections. Windows 11 pushes you to get the latest Windows 11 release every 12 months and only supports any consumer builds for 24 months. If you don’t let it finish and you’re on a slow connection, this process will kill your Internet performance forever. If you don’t have the bandwidth to download the bits, I’m happy to provide loaner USB drives to our local clients, or, if you prefer to have me mail it to you please contact me for information.
Windows 11 is now stable and can be upgraded to if your hardware supports it. If not, switch to Linux (Mint is nice) or replace your computer.
Please remember that while I list many different applications within these updates, most people should ONLY install updates for a program if they already have a previous version of that program installed.
It is essential to maintain all the applications you have installed on your computer, but often you can minimize the time investment and the potential for exploitation simply by uninstalling software you do not need or use, reducing the attack surface. This includes “free” applications like Avast, OpenOffice, drivers for hardware you’re not using (like old printers), and games you do not actually play.
Also note that using the applications own “check for updates” function, when available, will best preserve your current settings, and often avoid any crapware that might come with a fresh installer. Use this option if it’s available.
Finally, if you’re sick of doing this all yourself, let me! Call or email me any time, and we can set you up with a SaferPC Subscription and we will install updates each month whenever necessary. Click, call or email for more details:
https://saferpc.info/updates/
209-565-12PD
shawn@12pointdesign.com
Driver Updates
If you’re using this hardware – these updates are for you.
AMD Adrenalin 26.6.1 resolves stability issues. This is not a security update.
Logi Options+ 2.4.903778 resolves several bugs and improves compatibility. This is not a security update.
TP-Link Archer AX73 v2.0 260430 is a security update.
UniFi OS Server 5.1.15 is a security update.
Browser Updates
One or more of these are likely to be of interest to everyone.
Brave 1.91.168 is a security update. Use Menu, Help, About to install the most current update.
Firefox 151.0.4 is a security update. Use Menu, Help, About to install the most current update.
Firefox ESR 140.11.0 is a security update. Use Menu, Help, About to install the most current update.
Google Chrome 149.0.7827.102 is a security update. Use Menu, Help, About to install the most current update.
Microsoft Edge 149.0.4022.62 is a security update. Use Menu, Help, About to install the most current update.
Safari 26.5 is a security update. Use Apple Software Update to install the most current version.
Vivaldi 8.0.4033.44 is a security update. Use Menu, Help, About to install the most current update.
Email Updates
One or more of these are likely to be of interest to everyone.
Mailspring 1.21.1 should be treated as a security update.
Spark 3.29.2.139046 resolves several bugs. This is not a security update.
Spark (macOS) 3.29.3.139089 resolves several bugs. This is not a security update.
Thunderbird 151.0.1 is a security update.
Internet Updates
One or more of these are likely to be of interest to everyone.
AnyDesk 9.7.5 resolves several bugs. This is not a security update.
Discord June 4, 2026 resolves over a hundred bugs. This should be treated as a security update.
Dropbox 256.4.3790 does not provide a change log so should be treated as a security update.
FileZilla Client 3.70.6 resolves several bugs and removed automatic dection of exotic server types. This is not a security update.
Google Drive 126.0 resolves several bugs, adds Gemini integration, and replaces the clean icons with gaudy gradients. This is not a security update.
MeshCentral 1.2.0 resolves dozens of bugs. This is not a security update.
Mumble 1.5.901 improves stability and compatibility. This is a security update.
Nextcloud Server 34.0.0 is a major update with more than a hundred bug fixes and improvements. This is a security update.
Rclone 1.74.3 is a security update.
Signal 8.13.0 improves emojis and indicators. This is not a security update.
Signal (Android) 8.13.2 improves message safety and security warnings. This should be treated as a security update.
Syncthing 2.1.1 resolves several bugs. This is not a security update.
TeamSpeak Server 3.13.8 is a security update.
Telegram 6.9.1 improves rich text formatting, bots, and polling, adds markdown support, and resolves several bugs. This is not a security update.
Trillian 6.6.0.15 resolves over a dozen bugs, but logging is still broken (and probably won’t be fixed). This is not a security update.
Media Updates
These are unlikely to be of interest to most people.
3tene 4.0.28 resolves several bugs. This is not a security update.
FastStone Viewer 8.4 adds support for PDF and JPEG XL files, and resolves several bugs. This is not a security update.
KaraFun Player 3.12.1 resolves a bug in analytics. This is not a security update.
Plex Media Server 1.43.2.10687 is a security update.
Game Updates
These are unlikely to be of interest to most people.
Minecraft Server (Bedrock) 1.26.23.1 does not provide a change log so should be treated as a security update.
PS5 2026.526 improves stability. This is a security update.
Steam 2026.06.02 resolves over a dozen bugs. This is not a security update.
SteamOS SteamDeck Update 2026.06.04 is a security update.
Office Updates
One or more of these are likely to be of interest to most people.
Adobe Acrobat Reader 26.001.21662 is a security update.
Adobe Acrobat 26.001.21662 and 24.001.30383 are security updates.
Adobe Campaign Classic 7.4.3 build 9396 is a security update.
Adobe ColdFusion 2025 Update 9 and 2023 Update 20 are security updates.
Adobe Dreamweaver 21.8 is a security update.
Adobe Experience Manager 2026.05, 6.5 LTS Service Pack 2, and 6.5 Service Pack 25 are security updates.
Adobe Experience Manager Forms 6.5 LTS SP2 and 6.5.25.0 are security updates.
Adobe Format Plugins 1.1.3 is a security update.
Adobe InCopy 21.4 and 20.5.4 are security updates.
Adobe InDesign ID21.4 and ID20.5.4 are security updates.
Adobe Substance 3D Sampler 6.0.1 is a security update.
Adobe Content Credentials JS SDK c2pa-web@0.8.3 is a security update.
Adobe Content Credentials Rust SDK c2pa-v0.85.1 is a security update.
Artweaver 8.1.5 resolves several bugs. This is not a security update.
Audiate 2026.2.3 resolves several bugs. This is not a security update.
Calibre 9.9.0 adds several news sources and resolves a couple bugs. This is not a security update.
Ghostscript 10.07.1 is a security update.
ImageMagick 7.1.2-25 updates libraries and changes behavior for many file types to forbid opening files with invalid dimensions or headers. This should be treated as a security update.
Krita 5.3.2.1 resolves several bugs. This is not a security update.
Manager 26.6.7.3638 adds several new features and reports. Thisi s not a security update.
Nextcloud Desktop 33.0.5 resolves several bugs. This is not a security update.
Notepad++ 8.9.6.4 is the fifth security update in a month. Not a good look. 🙁
PDF Candy Desktop 3.20 does not provide a change log so should be treated as a security update.
PDF-XChange Editor 10.8.5.410 is a security update.
Operating System Updates
These are for specific Linux flavors and alternative operating systems and, sadly, are unlikely to be of interest to most people.
Bazzite 44.20260608 resolves several bugs. This is a security update.
Google ChromeOS 148.0.7778.250 is a security update. Use Menu, Help, About to install the most current version.
Google ChromeOS LTS 144.0.7559.254 is a security update. Use Menu, Help, About to install the most current version.
iOS 26.5.1 is a security update.
macOS Tahoe 26.5.1 is a security update.
PureOS 11 is a major update adding stability, security, and performance improvements. This is a security update.
Security Software Updates
One or more of these is likely to be of interest to most people.
FRST 2026.6.9 does not provide a change log so should be treated as a security update.
OnionShare 2.6.4 is a security update.
OpenSSL 4.0.1 is a security update.
ProtonVPN 4.4.0 updates the security certificate to allow it to operate further in the future. This is not a security update.
RogueKiller 16.6.2 changes some behaviors to improve performance and stability. This is not a security update.
Stinger 26.06.23.1 adds support for new detections. This is not a security update.
Velociraptor 0.76.6 is a security update.
VT-CLI 1.3.1 resolves a crash bug. This is not a security update.
Capture Updates
These are unlikely to be of interest to most people.
SnagIt 2026.2.2 updates the activation process. This is not a security update.
Converter Updates
These are unlikely to be of interest to most people.
BookFab 1.2.3.4 resolves several bugs and improves compatibility. This is not a security update.
DVDFab 13.0.6.1 integrates new AI features and resolves a couple bugs. This is not a security update.
FFmpeg 8.0.2 is a security update.
HandBrake 1.11.2 is a security update.
iMazing HEIC Converter 2.0.13 adds support for new conversion formats and resolutions. This is not a security update.
StreamFab 7.0.3.0 improves compatibility and resolves several bugs. This is not a security update.
UniFab 4.1.3.2 adds direct media contribution feature to improve quality of conversions and resolves several bugs. This is not a security update.
Education updates
One or more of these are likely to be of interest to most people.
Zotero 9.0.4 resolves several bugs. This is not a security update.
Utility Updates
These are unlikely to be of interest to most people.
1Password 8.12.22 adds MCP and resolves several bugs. This is not a security update.
AOMEI Partition Assistant 10.11.0 adds the ability to create or convert to a VM, improves file system detection and Windows To Go creator. This is not a security update.
Beyond Compare 5.2.2.32209 adds direct patch and diff import support, updates libraries, improves cosmetics and stability. This is a security update.
Bitcoin 31.0 updates RPC, P2P, and memory behaviors and features, increasing default resource allocation and providing more accurate transaction fee estimations. This is not a security update.
Bitwarden 2026.5.0 resolves several bugs. This is not a security update.
CCleaner 7.08.1355 improves stability and resolves several bugs. This is not a security update.
CPU-Z Installer 2.20.2 adds support for newer hardware and improves detection. This is not a security update.
DesktopOK 12.57 resolves several bugs. This is not a security update.
dnGrep 4.7.54.0 updates libraries and resolves several bugs. This is a security update.
Etcher 2.1.6 resolves a compatibility bug. This is not a security update.
ExplorerPatcher 26100.8457.70.1 improves compatibility and resolves several bugs. This is not a security update.
Fing 4.0.2 improves network insights and resolves several bugs. This is not a security update.
FoneTool 3.7.0 improves compatibility and resolves a couple bugs. This is not a security update.
Free Virtual Serial Ports 7.21.00.1710 improves compatibiliy and resolves a couple bugs. This is not a security update.
GoodSync 12.11.2 improves cosmetics and resolves a couple bugs. This is not a security update.
Memtest86+ 8.10 adds support for newer hardware and resolves several bugs. This is not a security update.
MobileFileSearch 1.51 adds a black background option. This is not a security update.
Open-Shell 4.4.198 resolves a couple bugs. This is not a security update.
OpenToonz 1.8.0 adds several new features, many tool and effect improvements, and resolves dozens of bugs. This is not a security update.
Remotly 1.39.3 adds option to enforce TLS for all connections, improves installer and new options. This is not a security update.
Synergy 1.20.3 resolves several bugs and improves compatibility. This is not a security update.
UniGetUI 2026.2.0 adds cosmetic options and resolves a WinGet compatibility bug. This is not a security update.
USBDeview 3.10 adds black background and save all items options. This is not a security update.
WinAudit 3.4.6 doesn’t provide a change log so should be treated as a security update.
Winhance 26.05.22 adds several new features and resolves over a dozen bugs. This is not a security update.
WinScan2PDF 9.77 improves hardware detection. This is not a security update.
Developer Updates
These are unlikely to be of interest to most people.
.NET Runtime 10.0.9 is a security update.
GDevelop 5.6.271 resolves several bugs. This is not a security update.
GitHub Desktop 3.5.12 resolves a couple bugs. This is not a security update.
Go 1.26.4 is a security update.
Inno Setup 6.7.3 resolves several bugs. This is not a security update.
Node.js 22.22.3 is a security update.
Node.js 24.16.0 is a security update.
Node.js 26.3.0 is a security update.
SQLite 3.53.2 resolves a couple bugs. This is not a security update.
Visual Studio Code 1.123.1 integrates even more AI features (whether you want it or not). This is a security update.
WinMerge 2.16.56.2 resolves several bugs. This is not a security update.
Web Package Updates
These are likely to be of interest only to web developers.
HumHub 1.18.3 resolves dozens of bugs. This is a security update.
Joomla 5.4.6 and 6.1.1 are security updates.
MAC Vendors 26-06-09 updates vendor registrations. This is not a security update.
MailEnable 9.91 and 10.58 are security updates.
WordPress 7.0 is a major update adding AI integration, a new admin theme, improved typography and design options (like custom CSS at the block level). This is not a security update.
Antispam Bee 2.11.12 resolves a stability bug. This is not a security update.
Contact Form 7 6.1.6 improves compatibility. This is not a security update.
My Sticky Bar 2.9.0 resolves a couple bugs. This is not a security update.
Sucuri Security 2.7.3 improves security. This is a security update.
WP Cerber Security 9.7.4 improves compatibility and resolves a couple bugs. This is not a security update.
WP Plugin Update Checker 5.7 adds support for unattended updates, API support and resolves a couple bugs. This should be treated as a security update.
YOURLS 1.10.4 is a security update.
That’s all for now folks. Keep it clean out there. 😉
Regards,
Shawn K. Hall
https://SaferPC.info/
https://12PointDesign.com/