Tech
Microsoft releases rare zero-day free Patch Tuesday update | Computer Weekly
Microsoft has addressed around 140 newly discovered common vulnerabilities and exposures (CVEs) in its May Patch Tuesday update, but for the first time in a long time, the latest monthly drop contains no zero-day flaws, meaning that none of the issues in scope have been actively exploited or publicly disclosed.
But while a less panic-inducing drop will be welcomed by security teams around the world, the May 2026 Patch Tuesday update contains almost 20 critical severity flaws that will inevitably draw the attention of threat actors in the coming days and weeks.
Jack Bicer, Action1 director of vulnerability research, said: “Although the absence of zero-days is a positive sign, the high number of critical vulnerabilities – particularly compared to recent months – means organisations should still move quickly to evaluate and deploy updates across affected systems.”
This month’s update is also particularly significant as it heralds a critical Secure Boot certificate expiration deadline on 26 June, a few weeks from now. Devices that fail to receive updated Secure Boot certificates – which are now rolling out – face potentially catastrophic failures or as-yet-undiscovered security flaws that may prove impossible to fix.
“The May 2026 update cycle is a high-stakes bridge to the 26 June certificate expiration deadline, making fleet-wide rotation to new trust anchors the month’s absolute priority,” said Rain Baker, senior incident response specialist at Nightwing’s ShadowScout team.
“For those who haven’t patched for last month’s releases for the Windows Shell and Microsoft Defender bypass flaws, it is imperative that security teams give these the highest priority,” added Baker.
Bugs abounding
Among some of the critical updates issued this month is a fix for a Windows DNS Client remote code execution (RCE) flaw tracked as CVE-2026-41096. This vulnerability stems from a heap-based buffer overflow condition in Windows NetLogon and could enable an unauthenticated actor to take over the target system by sending it a malicious DNS response.
“Because DNS is a core networking service used across enterprise environments, exploitation could impact a large number of systems rapidly,” said Action1’s Bicer.
“Successful attacks may lead to widespread endpoint compromise, ransomware deployment, credential harvesting, and operational disruption across corporate networks.
Bicer added: “This CVE requires immediate attention considering its severity rating, network-based attack vector, no authentication requirements, and no user interaction. DNS-related vulnerabilities are especially dangerous because they target foundational network services that are broadly exposed across enterprise infrastructure.”
Also drawing attention this evening is CVE-2026-42898, another RCE issue, this one in on-prem versions of Microsoft Dynamics 365, which bears a common vulnerability scoring system (CVSS) score of 9.9. Again, this issue requires no user interaction and because it can impact systems beyond the original security scope of the vulnerable component, carries an extreme risk to enterprises.
Previous attacks on Dynamics 365 infrastructure have exposed important, privileged data, and because CRM environments plug into so many other important systems, successful exploitation could lead to wholesale compromise.
Meanwhile, Automox chief technology officer Jason Kikta weighed in on CVE-2026-41089, an RCE flaw in Windows Netlogon, and CVE-2026-40402, an elevation of privilege (EoP) vulnerability in Hyper-V.
“CVE-2026-41089 – CVSS 9.8 out of 10 – is a stack-based buffer overflow in Windows Netlogon,” explained Kikta. “An attacker sends a crafted network request to a domain controller. No authentication required. No user interaction required. If you’ve been doing this long enough, the description language sounds sadly familiar.
“I’d be careful drawing a direct line to Zerologon. The underlying bug is a stack overflow, not a crypto protocol flaw, and Microsoft has not labeled this one as wormable. The mechanism is different, but the blast radius is still ugly when you’re talking about pre-auth code execution on a domain controller.”
The Hyper-V issue can be exploited by a low-privileged account inside a guest virtual machine (VM) to execute code on the host with system-level privileges. Kikta warned that one compromised guest could serve as a pivot point for every other VM on the same host, and the host fabric into the bargain. Hosted desktop environments and shared virtualisation platforms are likely to be swiftly targeted.
“Multi-tenant VDI, on-premises virtualisation with untrusted workloads, or any Hyper-V host running guests you don’t fully control. Same-week, same-day patch depending on what’s on top of it,” Kikta advised.
Patch apocalypse?
Lacking though it is in zero-days, Redmond’s latest meaty update will do little to assuage the concerns of onlookers alarmed at the supposedly earth-shattering vulnerability discovery capabilities of Anthropic’s Claude Mythos frontier AI model.
Chris Goettl, vice president of security product management at Ivanti, said that these concerns were being taken seriously by many key software suppliers and other tech firms that are becoming far more aggressive in their patching in response to the changes of the past few weeks.
“Oracle announced a new release cadence starting in May 2026 to address the acceleration of vulnerability detection introduced by Mythos and other AI security models; monthly Critical Security Patch Update (CSPUs) will fill in the two-month gap between their quarterly Critical Patch Update (CPU),” he said.
“Apple is another early participant in Project Glasswing and has seen a recent spike in the number of exposures resolved. They typically average around 20 CVEs per iOS security update [but] for their most recent update on May 11, there is a spike of 52 CVEs resolved. Across the 11 Apple updates, the CVE counts range from 25 at the low end to 52 on the high end and Apple backported changes all the way to iPhone 6s and iOS 15. While there are not actively exploited vulnerabilities, there are a lot of updates to manage.”
Meanwhile, Mozilla, the backers of the Firefox browser, which is said to have had over 270 vulnerabilities identified after Claude Mythos was applied to it, has also moved to a more aggressive weekly cadence for its security updates since the release of Firefox 150.0.0 in April 2026 – version 150.0.3 of Firefox dropped earlier today (12 May).
Tech
Hantavirus Conspiracy Theories Are Already Spreading Online
Conspiracy theorists, wellness influencers, and grifters have already started promoting wild claims about the hantavirus outbreak that began aboard the MV Hondius, a cruise ship on the Atlantic.
Some conspiracy theorists compared the outbreak to the Covid-19 pandemic, claiming it was another effort to control the global population, while others pushed a false narrative that the Covid-19 vaccine caused hantavirus. Many others promoted ivermectin as a treatment, using the incident as a way to sell emergency medical kits featuring the antiparasitic drug typically used as a horse dewormer.
In more recent days, many of these same people spreading conspiracy theories have promoted the baseless and antisemitic claims that the entire incident is a false flag orchestrated by Israel.
Conspiracy theories flooding social media in response to breaking news are nothing new, but what is notable about those being pushed around the hantavirus outbreak is just how closely they echo the conspiracy theories promoted during the Covid-19 pandemic.
“One of the most striking shifts since the Covid pandemic is how rapidly misinformation narratives now organize themselves around emerging outbreaks,” Katrine Wallace, an epidemiologist at University of Illinois Chicago School of Public Health, tells WIRED.
“Within hours of the first hantavirus headlines, social media accounts were already promoting ivermectin, attributing the outbreak to Covid vaccines, and warning about a hantavirus vaccine that does not exist. The claims themselves were often contradictory, but that contradiction no longer appears to limit their spread.”
Once the hantavirus outbreak started making headlines around the world, conspiracy theorists and grifters jumped into action, spreading dangerously ill-informed claims and, of course, trying to sell people ivermectin.
“Ivermectin should work against it,” Mary Talley Bowden wrote on X. Bowden, a doctor, is a prominent promoter of medical misinformation who has promoted ivermectin as a treatment for Covid-19 and prescribed ivermectin to a Covid-19 patient. Hours after her first post on Hantavirus went viral, she followed up to say that she is selling ivermectin to Texans. Bowden did not respond to a request for comment.
Her post, which has been viewed 4 million times, was shared by former Congresswoman Marjorie Taylor Greene, who added that vitamin D and zinc would help fight the infection. Greene even claimed that not getting the Covid-19 vaccine had somehow allowed her to “develop natural immunity” against hantavirus.
Greene separately claimed, without evidence, that the pharmaceutical company Moderna had purposely manipulated the virus in order to allow them to cash in by developing a hantavirus vaccine. Greene did not respond to a request for comment.
Other prolific health disinformation promoters boosted the ivermectin claims, including Simone Gold, the founder of Covid denial group America’s Frontline Doctors, and Peter McCullough, a disinformation peddler who promoted the “sudden death” conspiracy theory about the Covid-19 vaccine, which falsely claimed that those who received the shot were at risk of dropping dead without any warning.
McCullough is also the chief scientific officer for The Wellness Company, which has been described as “Goop for the GOP.” The company has used the hantavirus outbreak to promote a $325 “Contagion Emergency Kit” which includes both ivermectin and hydroxychloroquine.
All the false claims and posts about ivermectin gained enough traction online that the World Health Organization responded to say that there is no research to suggest ivermectin is an effective treatment for hantavirus.
Conspiracy theorists have, meanwhile, been pushing the baseless idea that a side effect of Covid vaccines includes a hantavirus infection.
Tech
Vodafone to offer 5G fixed wireless access in the UK | Computer Weekly
Hot on the heels of announcing its parent company has entered into a deal worth £4.3bn to buy CK Hutchison’s stake in the recently merged VodafoneThree in the UK, Vodafone has launched 5G Broadband, bringing high-speed connectivity via its 5G network to an additional 3.7 million homes and premises currently unable to access full-fibre networks.
By combining 5G Broadband and its existing full-fibre footprint, Vodafone says it can now bring full-fibre-like speeds to over 26 million homes, more than any other UK provider. The offer is targeted at households who cannot currently access full-fibre – renters, students and anyone who, says Vodafone, “wants powerful connectivity with flexibility”.
The launch reinforces the commitment made by VodafoneThree to connect every community as part of its £11bn investment programme to build out a network that can compete with the likes of BT/Openreach and Virgin Media O2. By bringing together the Vodafone and Three networks, the company said the combined 5G footprint will expand rapidly nationwide.
The offer is also a result of bringing the Vodafone and Three networks together and deploying its Multi Operator Core Network (MOCN) technology in more than 10,000 sites nationwide. This is designed to provide users with improved coverage with higher speeds in areas where it wasn’t previously available.
The enhanced coverage will also enable Vodafone 5G Broadband to reach 3.7 million more homes where there is currently no full-fibre. This complements Vodafone’s existing full-fibre footprint of 23.2 million homes – the largest of any UK provider.
With the service, customers can enjoy speeds from 50Mpbs to up to 150Mbps – 3x faster than a typical part-fibre connection – and unlimited data on every plan. For homes where the outdoor 5G signal is stronger than indoors, Vodafone assured that it would soon launch an outdoor hub to provide an extra boost.
The outdoor hub will require self-installation outside the property, where it will lock on to the strongest 5G signal available in the area and connect directly to the indoor Power Hub router. The result is claimed to be a consistent connection and “fast, seamless experience” throughout the home, even in rural areas.
Rob Winterschladen, consumer director at VodafoneThree, said: “Millions of households are still paying over the odds for unreliable and slow broadband that often only reaches 74Mbps. With Vodafone 5G Broadband, we’re giving those homes a genuinely fast alternative, at great value, with no installation, no waiting and no hassle … By adding 5G Broadband, we can now reach millions more [homes]. This launch is about giving customers real choice: full-fibre where it’s available, and powerful 5G broadband where it’s not – plus, better options for anyone wanting speed with ease and flexibility.”
Launching alongside Vodafone 5G Broadband is an integrated availability checker on Vodafone.co.uk, designed to make choosing the right connection effortless. Customers simply enter their postcode and are shown whether full-fibre or 5G broadband will give them the fastest speeds in their area.
Users can choose from a rolling 30-day or 24-month plan starting at £21 a month, with a £2-a-month discount for Vodafone Together customers. However, the operator cautioned that while the service operates on 5G where available, it may use 4G networks in limited circumstances.
Tech
Some Women Are Obsessively Testing Their Vaginas to Optimize Them
Farrah was fed up with her vagina.
For the past two years, the 29-year-old dancer from Ohio had been dealing with severe pelvic pain and vaginal odor. “It was like 8/10, horrible core pain,” she says. “I couldn’t lie down. I couldn’t even work an office job. It was bad.”
When she visited doctors, she told them what she thought the culprit was: an allergic reaction to soy oil in a vat of water she’d swam in during a pirate-themed dinner theater performance. But they didn’t believe her. “They attempted to fix it with antibiotics,” she says. “And they just did nothing.”
So Farrah (who requested we withhold her full name to speak freely about health matters) started Googling her symptoms. That’s how she stumbled on Neueve, a vaginal health company that provides supplements, suppositories, and at-home vaginal microbiome testing kits.
She ordered a test from the company for $150, and it came back with a diagnosis: aerobic vaginitis (AV), a bacterial infection caused by an overgrowth of E. coli or streptococcus. She ordered supplements the company recommended, and she says the pain abated almost immediately. “I was just so glad to actually know what was wrong,” she says.
Farrah is one of a growing number of women who have used at-home tests to self-diagnose issues with the vaginal microbiome—an ecosystem of bacteria growing inside the vagina; the presence of “good” bacteria correlates with lower risk of STIs and other types of infections, according to numerous studies. The industry got a shoutout when the Silicon Valley entrepreneur Bryan Johnson recently posted on X that he had just given oral sex to his girlfriend, Kate Tolo, then followed up with a screengrab of her TinyHealth vaginal microbiome report. He proclaimed that she scored “100/100” and that hers was in the “top 1% of all vaginas” due to the dominance of Lactobacillus crispatus, a type of “good” bacteria found in the vagina.
Johnson’s thread garnered widespread mockery, with many questioning why Johnson would publicly quantify his partner’s vaginal health in such a fashion. But it also received replies from women online who are tracking their own vaginal microbiomes to treat their bacterial infections, to boost fertility, or just out of interest. Some even posted their results.
The market for at-home vaginal microbiome tests is growing—TinyHealth, the startup Tolo used, claims vaginal health testing sales spiked 2,000 percent within the first 48 hours of Johnson’s post—and similar companies include Juno Bio, which partners with Neueve; the UK-based Daye, and Evvy. But some experts believe there’s not yet enough research to support the long-term validity of such tests. None of the at-home kits on the market are approved by the FDA. There are also questions as to whether they empower women to take their health care into their own hands or simply create more anxiety for them.
Twenty-eight-year-old Samantha (she also requested a pseudonym given the sensitive nature of this topic) developed an interest in vaginal microbiome testing after experiencing a bout of bacterial vaginosis, or BV. She ordered a testing kit from Evvy upon the recommendation of the Facebook group Beyond BV, which offers support for women with recurring vaginal infections, and where they often post their own results.
Samantha found her test results useful, but she also noticed a distinct strain of paranoia within the group. For instance, when many women receive their results, they tend to focus on whether they have enough Lactobacillus crispatus, or “good” bacteria, in the vagina. “I’ll read posts where women are freaking out if they have like 97 percent crispatus and then they’ll retest and they’ll have like 60 percent and be really disappointed and scared,” she says. The opposite also holds true. “Women will post about having 100 percent crispatus and other women in the comments will just be like, ‘Oh, I’m so jealous, I’m having so many issues, I hope to be you one day.’”
-
Tech1 week agoDHS Demanded Google Surrender Data on Canadian’s Activity, Location Over Anti-ICE Posts
-
Business1 week agoHeineken plans huge investment in hundreds of UK pubs ahead of World Cup
-
Tech5 days agoA new frontier: Identity stack evolves for agentic systems | Computer Weekly
-
Tech4 days ago‘Orbs,’ ‘Saucers,’ and ‘Flashes’ on the Moon: Pentagon Drops New UFO Files
-
Business1 week agoIndia among most resilient large EMs, better placed for future global shocks; policy reforms & strong buffers help: Moody’s – The Times of India
-
Fashion5 days agoNew orders in German manufacturing up 5% MoM in Mar 2026: Destatis
-
Tech5 days agoWhat Microsoft Executives Really Thought About OpenAI in 2018
-
Business1 week agoUS denies Iranian report warship was struck by missiles
