May 22, 2026
Cyber Security Week in Review: May 22, 2026
In brief: Microsoft fixes two zero-days in Defender, authorities dismantle the First VPN service used by cybercriminals, and more.
19 min read
Vulnerability Intelligence Services
Real-time Actionable Vulnerability Intelligence
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoKey Metrics
66,720
Software vendors monitored
Continuously updated
1,484
Avg vulnerability reports processed daily
+2,226 today
11,877
Security Bulletins released in 2026
+2,326 this month
959
Zero-day vulnerabilities reported
+39 this year
Latest Security News
May 21, 2026
First VPN service used by cybercriminals dismantled in international police op
Criminal groups allegedly used the service to hide their identities and online infrastructure.
3 min read
May 21, 2026
Microsoft rolls out out-of-band security patches to fix two Defender zero-days
The company has also patched a critical remote execution flaw, which has no signs of active exploitation.
3 min read
May 20, 2026
GitHub confirms nearly 4K repos breached after employee installed malicious VS Code extension
The company said that its current investigation indicates the attackers accessed only GitHub’s internal repositories.
2 min read
May 20, 2026
China-linked Webworm APT updates its arsenal with EchoCreep and GraphWorm backdoors
Webworm has shifted from the McRat and Trochilus remote access trojans to lightweight proxy infrastructure and cloud-based C&C mechanisms.
3 min readFeatured Security Bulletins
View vulnerability databaseCode
Security Bulletin
Severity
Status
Date
SB20260522144
Medium
Patched
May 22, 2026
SB20260522143
Multiple vulnerabilities in gst-plugins-good
CVE-2026-46469, CVE-2026-46470, CVE-2026-46472, and 2 more
CVE-2026-46469, CVE-2026-46470, CVE-2026-46472, and 2 more
High
Patched
May 22, 2026
SB20260522142
Medium
Patched
May 22, 2026
SB2026052280
High
Exploited
May 22, 2026
SB2026052276
Medium
Patched
May 22, 2026
SB2026052257
Multiple vulnerabilities in Mozilla Thunderbird
CVE-2026-8963, CVE-2026-8962, CVE-2026-8974, and 26 more
CVE-2026-8963, CVE-2026-8962, CVE-2026-8974, and 26 more
High
Patched
May 22, 2026
SB2026052256
Multiple vulnerabilities in Thunderbird ESR
CVE-2026-8957, CVE-2026-8956, CVE-2026-8974, and 17 more
CVE-2026-8957, CVE-2026-8956, CVE-2026-8974, and 17 more
High
Patched
May 22, 2026
SB2026052248
Medium
Patched
May 22, 2026
SB2026052247
Multiple vulnerabilities in IBM DevOps Code ClearCase
CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, and 4 more
CVE-2026-24072, CVE-2026-28780, CVE-2026-34059, and 4 more
High
Patched
May 22, 2026
SB2026052246
Medium
Patched
May 22, 2026