2026-05-14: Microsoft patched 138 vulnerabilities including critical RCE flaws in DNS and Netlogon

Show Notes - 2026-05-14

Stories Covered

• May 14, 2026
• Today:
• Windows BitLocker Zero-Day Bypasses Encryption (YellowKey) [Critical Alerts]
• Windows Privilege Escalation Zero-Day (GreenPlasma) [Critical Alerts]
• Critical Outlook Zero-Click RCE (CVE-2026-40361) [Critical Alerts]
• The Gentlemen RaaS Internal Database Leaked [Ransomware & Extortion]
• Foxconn Confirms Nitrogen Ransomware Attack [Ransomware & Extortion]
• Device Code Phishing Campaigns Surge [Ransomware & Extortion]
• Iranian APT Targets South Korean Electronics Manufacturer [Business & Infrastructure Threats]
• China-Linked FamousSparrow Targets Azerbaijani Energy Sector [Business & Infrastructure Threats]
• Microsoft May 2026 Patch Tuesday: 138 Vulnerabilities [Windows / AD Security]
• Microsoft Fixes BitLocker Recovery Issue on Windows 11 Only [Windows / AD Security]
• Fragnesia Linux Kernel Privilege Escalation (CVE-2026-46300) [Vulnerability Disclosures]
• Critical Exim Mail Server RCE (CVE-2026-45185) [Vulnerability Disclosures]
• Google Pixel 10 Zero-Click Exploit Chain [Vulnerability Disclosures]
• RubyGems Abused as Data Dead Drop [General Security News]
• Healthcare Lab Fined for Security Failures Before Cyberattack [General Security News]
• UK Regulator Fines Water Company for Cybersecurity Failures [General Security News]

CVEs Referenced

CVE-2015-6172, CVE-2024-55591, CVE-2025-32433, CVE-2025-33073, CVE-2025-54957, CVE-2026-33109, CVE-2026-33825, CVE-2026-40361, CVE-2026-40402, CVE-2026-41089, CVE-2026-41096, CVE-2026-42826, CVE-2026-42898, CVE-2026-43284, CVE-2026-43500, CVE-2026-45185, CVE-2026-46300

Read the full brief