2026-05-13: Microsoft ships 137 patches with no zero-days for the first time in two years

Show Notes - 2026-05-13

Stories Covered

• May 13, 2026
• Today:
• Microsoft Windows Netlogon RCE (CVE-2026-41089) [Critical Alerts]
• Microsoft Windows DNS Client RCE (CVE-2026-41096) [Critical Alerts]
• Exim Mail Server Use-After-Free (CVE-2026-45185) [Critical Alerts]
• Microsoft Entra ID Credential Bypass (CVE-2026-41103) [Critical Alerts]
• Foxconn Confirms Ransomware Attack, Nitrogen Gang Claims Data Theft [Ransomware & Extortion]
• Instructure Pays Ransom to Restore Canvas Platform [Ransomware & Extortion]
• Supply Chain Attack on npm TanStack Packages [Business & Infrastructure Threats]
• RubyGems Disables Sign-Ups After Staff-Targeted Attack [Business & Infrastructure Threats]
• Best Western International Data Breach [Business & Infrastructure Threats]
• UK Water Utility Fined for 2-Year Breach Detection Failure [Business & Infrastructure Threats]
• Microsoft Office Word Preview Pane RCE Vulnerabilities [Windows / AD Security]
• Microsoft Dynamics 365 Code Injection (CVE-2026-42898) [Windows / AD Security]
• Windows GDI RCE via Malicious EMF Files (CVE-2026-35421) [Windows / AD Security]
• Microsoft SharePoint RCE (CVE-2026-40365) [Windows / AD Security]
• Azure Critical Vulnerabilities Remediated by Microsoft [Windows / AD Security]
• Windows 11 May 2026 Updates [Windows / AD Security]
• Windows 10 Extended Security Update (KB5087544) [Windows / AD Security]
• AI-Driven Vulnerability Discovery Accelerating Patch Volumes [General Security News]
• CISA Releases SBOM Guidance for AI Systems [General Security News]
• Intel and AMD Chipmaker Vulnerabilities [Vulnerability Disclosures]
• ABB Industrial Control System Vulnerabilities [Vulnerability Disclosures]
• Siemens, Schneider Electric, and ICS Vendors Publish Patch Tuesday Advisories [Vulnerability Disclosures]

CVEs Referenced

CVE-2024-41975, CVE-2025-15467, CVE-2025-2595, CVE-2025-41659, CVE-2025-41691, CVE-2025-4676, CVE-2026-0481, CVE-2026-20794, CVE-2026-26289, CVE-2026-33109, CVE-2026-33570, CVE-2026-33844, CVE-2026-35421, CVE-2026-35504, CVE-2026-35555, CVE-2026-40361, CVE-2026-40364, CVE-2026-40365, CVE-2026-41089, CVE-2026-41096, CVE-2026-41103, CVE-2026-42823, CVE-2026-42826, CVE-2026-42898, CVE-2026-45185

Indicators of Compromise

IP Addresses: 127.0.0.1

Read the full brief