May 2026 Patch Tuesday: Anthropic Researchers Credited by Name on Critical Windows RCE CVEs

Krebs on Security / The Register·high signal

Microsoft's May 2026 Patch Tuesday fixed 118+ vulnerabilities (16 critical), with AI-assisted vulnerability research credited by name for the first time — Anthropic researchers are listed on a critical Windows RCE. This comes from Project Glasswing, where 12 companies (Apple, Amazon, Cisco, Microsoft, etc.) received preview access to Anthropic's Mythos vuln-discovery model. The Register dubbed the trend 'vulnpocalypse' as AI-discovered bugs now appear in patches from all three major OS vendors.