Microsoft shipped its largest-ever Patch Tuesday, 24 billion stolen credentials surfaced on an exposed Elasticsearch cluster, and ransomware gangs claimed 721 new victims. Three records, one month — and none of them are a coincidence.
Mediaworks lost 8.5 TB of internal data to a ransomware group. Instructure paid ShinyHunters to keep 3.65 TB of Canvas data off the dark web. Across two weeks in May 2026, a cascade of breaches hit education, manufacturing, media, and retail — and barely anyone noticed. When breaches become background noise, the threat isn’t technical anymore. It’s apathy.
Check Point Research records 698 ransomware attacks worldwide in May 2026, a 48% year-over-year jump, even as overall attack volumes drop 7%. Fewer attacks, more impact — threat actors are getting better at doing more with less.
The group systematically exploited CVE-2024-50623 and CVE-2024-55956 in Cleo MFT products between October and December 2024, affecting over 180 organizations. The October patch failed; a second CVE had to be issued six weeks later.
The SafePay ransomware group exfiltrated 8.5 terabytes of data from BPO giant Conduent between October 2024 and January 2025, exposing over 25 million individuals. It's the costliest supply chain breach of the year for US governments — and a wake-up call for any CISO who depends on a critical third party.
