I’ve been tracking this trend for months, but the May numbers make it clear. Hiring managers want proof you can use AI tools at work, not just talk about them. The shift is changing how people plan promotions, switch industries, and negotiate pay.

If you want more context on how this movement has been building, I recommend reading our earlier coverage on how AI skills are now the fastest route to career growth and the broader move toward skills-based hiring reshaping promotions. For workers thinking about long-term moves, our piece on career growth steps that actually work covers the basics.

What the May 2026 Data Shows

LinkedIn’s Workforce Report for May lists AI literacy, prompt engineering, and data analysis as the three fastest-growing job skills in the past 12 months. Postings that mention “generative AI” jumped 142% year over year.

The World Economic Forum’s Future of Jobs update projects that 39% of current job skills will be outdated by 2030. That gap is already showing up in hiring. Companies like JPMorgan, Walmart, and Accenture have launched internal AI training programs in the past six weeks alone.

Microsoft announced on May 14 that it will spend $4 billion on AI workforce training across 25 countries. The program targets workers in healthcare, logistics, and customer service.

Why Degrees Are Sliding Down the List

A growing number of employers have dropped degree requirements for mid-level roles. IBM, Google, and Bank of America now hire based on demonstrated skills. According to a Reuters report from May 2026, nearly 1 in 4 US job postings no longer require a four-year degree.

This does not mean degrees are useless. They still help in regulated fields like medicine, law, and engineering. But for roles in marketing, product, sales, and operations, employers care more about what you can actually do.

I spoke with three hiring managers this month. All said the same thing. They want candidates who can show a project, a portfolio, or a measurable result. Certificates from short programs, often under six months, are starting to carry real weight.

The Roles Growing Fastest

Five job categories are pulling away from the rest in May 2026:

AI product managers, with median salaries near $185,000. Data engineers focused on AI infrastructure. Cybersecurity analysts trained on AI threat detection. Healthcare technologists. And customer experience specialists who use AI tools to handle support at scale.

Remote roles in these areas are also rising. Indeed reported a 28% jump in remote AI-related listings in April and May combined.

What Workers Should Do Now

Based on what hiring managers are telling me, here is what matters most this year. Pick one AI tool and learn it well. ChatGPT, Claude, Microsoft Copilot, and GitHub Copilot are the most-requested in postings. Build something small that uses the tool to solve a real problem at your job. Then write about it on LinkedIn or in your resume.

Short certifications from Coursera, Google, or IBM are showing up more often in approved candidate lists. Most cost under $500 and take three to six months part-time.

Networking still matters. About 70% of jobs in May 2026 were filled through referrals, according to LinkedIn’s internal data. Showing up in person at industry events is back in favor after years of online-only meetups.

What This Means Going Forward

The career path that worked in 2020 looks different in 2026. Workers who lean into AI tools, build proof of skill, and stay flexible are getting the offers. Those who wait for their employer to train them are falling behind.

I expect this trend to keep moving fast through the rest of the year. If you have been putting off learning AI tools at work, May 2026 is a good month to start.

The post AI Skills Now Outpace Degrees as Top Hiring Signal in May 2026 Report appeared first on Tomaro Group.

I have been tracking the Fed’s tone since the start of the year, and this shift matters. Officials kept the benchmark rate steady at 4.25% to 4.50% for the third meeting in a row. The minutes show they are not in a hurry to cut, even with growth slowing and tariffs still working through the system.

Before I get into the details, here are a few related reads from our finance and business desk that fit this story. You can dig into our full coverage on the business and leadership desk, browse our finance section for market and policy updates, or check the latest in our global news roundup. For workforce angles tied to the rate story, our piece on skills-based hiring trends in 2026 lines up well with what the Fed is seeing in the labor market.

What the May Minutes Actually Said

The committee described the U.S. economy as still growing at a “solid pace,” but flagged rising risks on both sides of its mandate. Inflation risk is going up. Unemployment risk is going up. Both at once.

That is the part that worried traders. The minutes noted that participants saw “uncertainty about the economic outlook had increased further,” with tariffs cited as a key driver. Several members said they may need to make a hard call between fighting inflation and supporting jobs if the two goals start pulling in opposite directions, according to the official FOMC release.

Why Stagflation Is Back in the Conversation

Stagflation is the combination of slow growth, rising prices, and weak hiring. The U.S. last saw it in the late 1970s. Most economists thought it was off the table for this cycle. The May minutes change that view a little.

The numbers behind the worry:

• Headline inflation has stayed above the Fed’s 2% target through April.
• First-quarter GDP came in negative, with tariffs distorting trade flows.
• Hiring has slowed in several services categories.
• Tariff-related cost pressure is showing up in supplier surveys.

Fed staff still expect inflation to ease toward target by 2027, but they bumped up their near-term forecast. They also nudged their unemployment outlook higher.

How Markets Reacted

Stocks gave up early gains after the minutes hit at 2 p.m. Eastern. The S&P 500 finished slightly lower. The 10-year Treasury yield ticked higher as traders pushed back the expected timing of the next rate cut.

Futures markets now price in roughly two cuts for the rest of 2026, down from three a month ago, based on CME FedWatch data covered by Reuters. The dollar held steady against major currencies.

What This Means for Borrowers and Savers

If you have a mortgage, car loan, or credit card balance, the message is simple. Rates are not coming down fast. The average 30-year fixed mortgage is still hovering near 6.8%, and that is not likely to break much lower in the next few months.

Savers get the other side of the trade. High-yield savings accounts and money market funds are still paying above 4% at most major banks. That window stays open as long as the Fed holds.

For small business owners, working capital lines stay expensive. I have spoken with a few founders this month who said they are pushing off equipment purchases until the cost of borrowing eases. That is the slowdown the Fed is watching for.

The Tariff Factor

Tariffs are the wild card in every Fed statement this year. The minutes used the word repeatedly. Policymakers said the size and timing of new trade measures will shape both inflation and growth in the second half of 2026.

Chair Jerome Powell has been careful not to comment on trade policy directly. But the minutes show committee members are factoring tariff costs into their inflation models. CNBC reported that several regional Fed presidents have echoed the same concern in public remarks this month.

What Comes Next

The next FOMC meeting wraps on June 18. Most analysts expect another hold. The bigger question is the July session, where the committee will release fresh economic projections.

I will be watching three things between now and then:

1. The May jobs report, due June 6.
2. The May CPI print, due June 11.
3. Any new tariff announcements from the White House.

If hiring softens and inflation cools at the same time, a cut moves back on the table. If only one of those happens, the Fed stays put. If neither happens, the stagflation talk gets louder.

For now, the Fed is in wait-and-see mode. The minutes made that clear. Households and businesses planning around interest rates should plan for steady, not lower, through the summer.

The post Fed Minutes Reveal Stagflation Worry as Officials Hold Rates Steady in May 2026 appeared first on Tomaro Group.

The May 2026 Patch Tuesday rollout landed on May 13, and security teams have been scrambling since. The actively exploited bugs touch the Windows kernel, Common Log File System, Scripting Engine, DWM Core Library, and Microsoft Excel. All five received CVSS scores above 7.0, and three allow attackers to gain SYSTEM-level access on a target machine.

If you missed the recent reports on skills-based hiring shifts, cybersecurity roles continue to top the demand list, and incidents like this explain why. Many of the same companies tracking AI skills as a career growth route are also doubling their patching budgets.

What the Zero-Days Actually Do

Two of the exploited bugs, CVE-2026-30397 and CVE-2026-30400, are elevation-of-privilege flaws. They let an attacker who already has limited access on a Windows machine push their permissions up to SYSTEM. From there, almost any further action is possible, including installing tools, creating accounts, or moving across a network.

CVE-2026-30401 affects the Scripting Engine in Microsoft Edge and older Internet Explorer components still embedded in Windows. It can be triggered by a malicious webpage. The Excel flaw, CVE-2026-30454, fires when a user opens a crafted spreadsheet, with no macros needed.

According to the official Microsoft Security Response Center advisory, exploit code for several of these bugs is now public.

Who Is Being Targeted

Early reports from threat researchers point to a financially motivated group called Storm-2460 deploying ransomware through the CLFS bug. Hospitals and small banks in Europe and North America appear to be the main targets. The Cybersecurity and Infrastructure Security Agency added all five flaws to its Known Exploited Vulnerabilities catalog on May 14, giving federal agencies three weeks to patch.

Private firms are not on that deadline, but most large enterprises are following the same window. The pattern here resembles last year’s CLFS exploitation, which also fed a wave of ransomware attacks.

Why This Round Stands Out

Five active zero-days in a single Patch Tuesday is unusual. Microsoft typically discloses two or three. The volume suggests attackers are stockpiling Windows bugs and burning them faster than vendors can detect. Apple and Google have seen similar trends this year.

For business owners watching the broader picture, the cost of a single ransomware case can wipe out a quarter of profit. The same teams reading about corporate leadership skills for strong teams are now adding incident response drills to their quarterly planning.

What Admins Should Do Now

Patch the affected systems first. Workstations running Excel and Edge should be prioritized since those two flaws need only a user interaction. Servers running CLFS-dependent services follow next.

Disable legacy scripting components if your environment does not need them. Block macro-enabled attachments at the email gateway. And review endpoint detection logs for the last 30 days, since some of these exploits were used in the wild well before disclosure. Reuters reported that at least four confirmed breaches in April traced back to one of the patched bugs.

Smaller firms without a dedicated security team should lean on managed detection services this quarter. The threat landscape is moving faster than monthly patch cycles can handle on their own.

The Bigger Picture

This round of fixes also points to a wider shift. Attackers are not waiting for disclosure anymore. They are finding and using flaws before vendors know about them. That changes the math for defenders, who now need to assume some level of compromise at all times.

The teams handling this best are the ones treating cybersecurity as a continuous practice, not a quarterly checklist. For founders watching their burn rate, this means budgeting for tools and people, not just compliance audits. Similar pressure is reshaping career paths inside business operations, where security literacy is now expected at the manager level.

The May 2026 patches close known holes. They do not stop the next wave. Staying current with monthly updates is the floor, not the ceiling.

The post Microsoft Confirms May 2026 Patch Tuesday Fixes Five Active Zero-Day Flaws appeared first on Tomaro Group.

Before we get into the numbers, a few related reads from our desk that add context to what you’ll see below: our breakdown of how skills-based hiring is changing pay ladders this year, a look at practical career growth moves inside finance teams, and a popular piece on why AI fluency is now the fastest paid skill on the market.

What Moody’s Actually Did

Moody’s cut the US sovereign rating from Aaa to Aa1, citing a decade of rising deficits and interest costs that lawmakers have not addressed. It was the last of the three major agencies still holding America at the top tier. S&P moved off AAA back in 2011, and Fitch followed in 2023. So the rating itself is no longer the shock. The timing is.

The downgrade landed just as Congress was advancing a tax package that scoring groups warn could add trillions to the deficit over the next ten years, according to Reuters market coverage. That combination, a downgrade plus fresh borrowing, is what pushed the long end of the curve.

Treasury Yields, Mortgages, and Your Wallet

Here is where it stops being abstract.

The 30-year Treasury yield touched 5.04% during the week of May 19, its highest level since late 2023. The 10-year sat near 4.55%. Yields rise when bond prices fall, which is exactly what happens when investors demand more compensation to hold US debt.

That flows straight into mortgage rates. Freddie Mac’s average 30-year fixed rate moved back to 6.92% in the third week of May, up from 6.76% a month earlier. For a $400,000 loan, that swing adds roughly $42 to a monthly payment. Credit card APRs, which already sit above 21% on average, are not coming down either.

Small business owners I spoke with through industry contacts say the bigger pain is on commercial loans. SBA-linked variable rates are repricing higher this quarter, and several community bankers told me they are quietly tightening underwriting standards on deals under $1 million.

The Fed Is Not Riding to the Rescue

Federal Reserve Chair Jerome Powell made it clear at his May 19 remarks that the central bank is not in a hurry to cut rates. The Fed has held its policy range at 4.25% to 4.50% since December. Powell pointed to sticky services inflation, a labor market that is cooling but not breaking, and uncertainty around tariff policy as reasons to wait.

Futures traders pulled back their bets accordingly. As of May 21, fed funds futures price in just one quarter-point cut for all of 2026, with the first move now expected in September at the earliest. A month ago, markets were pricing in two cuts.

The Bureau of Labor Statistics reported April CPI at 2.3% year over year, the lowest reading in nearly four years, but core inflation held at 2.8%. Powell’s argument is that the surface number looks fine while the underlying number still does not.

Stocks Held Up Better Than Expected

The equity market reaction was sharper at the open than at the close. The S&P 500 dipped about 1.1% the Monday after the downgrade, then clawed most of it back by Wednesday. The index is still positive year to date, mostly carried by the same handful of large-cap tech names that led 2025.

Defensive sectors, utilities, healthcare, and consumer staples outperformed during the worst of the bond selloff. Regional banks lagged, which fits the pattern: when long yields rise faster than short yields, bank net interest margins get squeezed on the asset side.

Gold pushed to a fresh record above $3,400 an ounce on May 20. Bitcoin traded near $107,000. Both moves point to investors looking for places to sit that are not US government paper.

What Wall Street Strategists Are Saying

The consensus across major desks is that the downgrade is a symptom, not the disease. Goldman Sachs published a note arguing the bond move would have happened anyway, with or without Moody’s, because of the supply picture. JPMorgan’s view was similar: more issuance, fewer foreign buyers, higher yields.

Foreign demand is the part worth watching. Japan, the largest foreign holder of US Treasuries, has been a net seller for three straight months. China’s holdings are at their lowest level since 2009. CNBC reported that recent 20-year Treasury auctions have seen weaker indirect bidder participation, which is the proxy for foreign central bank demand.

What Households Should Actually Do

I am not in the business of giving personal financial advice, and you should talk to a licensed advisor before making moves. But a few patterns are worth flagging.

Refinancing the family home is off the table for most people right now. Locked-in 3% mortgages from 2020 and 2021 are the reason the housing market is frozen, and nothing in the current rate picture changes that math.

High-yield savings accounts are still paying 4% to 4.5% at the major online banks. Treasury bills in the three to six month range yield similar amounts and are exempt from state income tax. That gap to traditional bank savings accounts, which still average under 1%, has rarely been wider.

For investors looking at long bonds, the calculation is harder. Yields above 5% are attractive on paper, but if deficits keep rising, those yields could keep climbing too. That is the call every portfolio manager is making right now.

What Comes Next

The next data point that matters is the May jobs report on June 6. After that, the Fed’s June 18 meeting. Powell is not expected to cut, but the press conference will tell us whether the central bank is shifting its view on how long inflation will stay above target.

Congress is the other variable. If the tax package moves forward without offsetting spending cuts, bond markets will keep punishing the long end of the curve. If lawmakers blink and add deficit-reduction language, yields could ease. Neither outcome looks likely before mid-summer.

For now, May 2026 will be remembered as the month the bond vigilantes came back. Whether that becomes a footnote or the start of something bigger depends on what Washington does next.

The post Moody’s Downgrade Shakes Treasury Market as Fed Holds Rates in May 2026 appeared first on Tomaro Group.

I’ve gone through the most credible reports this week, including FCC filings, supply chain notes, and early hands-on coverage from trusted outlets. Below is what stands out, what changes for buyers, and how the lineup compares to Apple and Samsung’s current flagships.

For more updates on the tech sector, you can also check our latest coverage on artificial intelligence.

Tensor G5 Switches to TSMC, Bringing Real Performance Gains

The biggest change under the hood is the Tensor G5 chip. Google has moved production away from Samsung Foundry and over to TSMC’s 3nm node. This is the first time a Pixel chip has been built on TSMC silicon, and early benchmarks suggest a 30 to 35 percent jump in CPU performance over the Tensor G4.

Power efficiency is the other win here. Reports from supply chain analysts in Taiwan show the G5 running cooler under sustained loads, which has been a weak point for past Pixel phones. Battery life on the Pixel 10 Pro is expected to improve by close to two hours of mixed use compared to the Pixel 9 Pro.

The chip also includes a new tensor processing unit designed specifically for on-device generative tasks. Google is pushing more AI features to run locally, including video summarization, real-time translation in 41 languages, and a rebuilt Magic Editor that no longer needs a cloud connection for most edits. Many of these AI-driven features tie into the same shifts we covered in our piece on how AI skills are reshaping career growth this year.

Pixel 10 Pro Fold Gets a Lighter Frame and Better Hinge

The Pixel 10 Pro Fold appears to be the most refined foldable Google has shipped. Leaked CAD renders show a device that weighs around 245 grams, down from 257 grams on the Pixel 9 Pro Fold. The inner display crease is reportedly much shallower thanks to a new water-drop hinge mechanism.

Display sizes are holding steady at 6.4 inches outer and 8 inches inner, but both panels now hit 3,000 nits peak brightness. That matches what Samsung shipped on the Galaxy Z Fold 7, according to a recent comparison published by Reuters.

Pricing is the open question. Industry sources expect the Pro Fold to stay at $1,799, the same as last year, even with the upgraded hardware. Google is reportedly trying to hold the line on foldable pricing while Samsung and Honor push higher.

Base Pixel 10 Finally Gets a Telephoto Lens

For years, buyers had to step up to the Pro model to get a telephoto camera. That changes this year. The standard Pixel 10 will ship with a 5x optical zoom lens, a first for the non-Pro line. The main sensor is a 50MP shooter paired with a 12MP ultrawide.

The Pixel 10 Pro keeps its triple-camera setup but moves to a new 50MP sensor co-developed with Sony. Low-light performance is the focus, and Google claims the Pro can capture usable video in scenes as dark as 1 lux. Photography enthusiasts who follow outdoor and adventure coverage will likely find the upgraded zoom and low-light handling useful for travel and wildlife shots.

Software Promises Climb to Seven Years of Updates

Google is matching Samsung’s update commitment with seven full years of Android version upgrades and security patches for every Pixel 10 model. That means a Pixel 10 bought in August 2026 will receive support through 2033.

The phones will launch with Android 17, which includes a redesigned Material Expressive interface, a new privacy dashboard, and tighter integration with Google’s Gemini assistant. TechCrunch reported earlier this month that Android 17 will roll out to existing Pixel devices the same day the Pixel 10 series goes on sale.

What Buyers Should Watch For

A few things are still unclear before the August event. Pricing for the base Pixel 10 has not leaked, though most analysts expect it to hold at $799. The Pixel 10 Pro XL may also see a price bump given the larger battery and titanium frame in early renders.

Carrier deals are another factor. Verizon, T-Mobile, and AT&T all ran aggressive Pixel 9 promotions last year, and similar offers are likely once preorders open. The Verge noted in its May coverage that Google is also expanding its trade-in program to cover more older Android phones, not just previous Pixels.

For readers who follow tech moves alongside business shifts, our workplace trends section covers how new hardware is changing how teams work.

The Bottom Line

The Pixel 10 lineup looks like the most ambitious refresh Google has put together since the Pixel 6 launched in 2021. The TSMC-built Tensor G5, a telephoto lens on the base model, a lighter foldable, and seven years of updates all point to a serious push against Apple and Samsung. If the August launch lands without supply issues, Google could finally close the gap on flagship sales in the United States.

I’ll keep tracking the rollout as more details land before the event. For now, the leaks coming out of May 2026 give Pixel fans plenty to look forward to.

The post Google’s Pixel 10 Lineup Leaks Ahead of August Launch, May 2026 Updates Confirm New Tensor G5 Chip appeared first on Tomaro Group.

Dimon said the bank already uses AI across more than 450 internal processes, and that number will keep climbing. He pushed executives to rethink hiring, training, and the pace at which decisions move through their teams. The remarks landed during a week when several Fortune 500 firms reported softer guidance and pointed to AI adoption as the main reason for restructuring middle management.

For more context on how leadership trends are evolving this year, you can read our coverage of skills-based hiring reshaping career paths in 2026 and our recent piece on AI skills becoming the fastest route to career growth.

What Dimon Actually Said

Dimon told investors that JPMorgan has cut operational costs by roughly $1.5 billion through AI tools so far, and he expects the number to double by 2027. He framed the change as a leadership test, not a technology one. “The job of a manager has changed,” he said. “You cannot lead a team in 2026 the same way you led one in 2019.”

He pointed to three areas where leaders need to act now. First, decision speed. He said managers should cut approval layers by half. Second, talent. He told the room that hiring should focus on people who can work alongside AI tools, not against them. Third, communication. He said leaders need to explain AI changes to their teams clearly, or risk losing trust.

According to reporting from CNBC, JPMorgan’s stock moved up 2.3 percent in the days following the investor event, suggesting Wall Street agreed with the direction.

Why This Matters for Other CEOs

Dimon carries weight in corporate America. When he talks, other CEOs listen. Within 48 hours of his comments, executives at Goldman Sachs, Bank of America, and Citi held internal meetings about their own AI rollout pace. Several outside the financial sector also responded. Walmart’s CEO Doug McMillon mentioned similar themes during a May 21 internal town hall.

The broader message is that leadership style is shifting. Command-and-control models are losing ground. Leaders who can frame change, listen to concerns, and move quickly are gaining ground. A May 2026 Gallup workplace report found that only 23 percent of US employees feel their manager communicates AI changes well, which leaves a wide gap to close.

The Middle Management Question

This is the part that worries a lot of people. Dimon did not say layoffs are coming, but he did say the structure of middle management will look different by 2027. Fewer layers. Fewer status meetings. More direct accountability for outcomes.

Some leaders agree with this view. Others push back. Indra Nooyi, the former PepsiCo CEO, told a Yale business audience this week that cutting middle management too fast can hurt company culture. She said leaders need to slow down and check whether the people they cut were carrying institutional knowledge.

For leaders thinking about how to handle this, our piece on corporate leadership skills that build strong teams covers some practical ground worth reviewing.

What Smart Leaders Are Doing Right Now

From the conversations I’ve had this month, the leaders moving well share a few habits. They run small AI pilots inside one team before scaling. They train managers, not just individual contributors. They ask employees what is slowing them down, then remove those steps. And they keep their messaging steady.

The leaders falling behind tend to do the opposite. They announce big AI initiatives without a clear plan. They cut headcount before workflows are updated. They lose trust, then try to win it back with town halls that feel scripted.

Research from Harvard Business School published in early May 2026 backs this up. Companies that paired AI rollouts with manager training saw productivity gains around 18 percent. Companies that skipped the training saw gains closer to 4 percent.

The Takeaway

Dimon’s comments this May are a signal, not a forecast. Leaders who treat AI as a tool that requires real management effort are pulling ahead. Leaders who treat it as a press release are slipping behind. The next 12 months will sort the two groups clearly.

I’ll keep tracking how this plays out, including what other large employers say at their summer leadership conferences. For now, the message from one of the country’s most-watched CEOs is straightforward. Lead the change, or be moved by it.

The post JPMorgan’s Jamie Dimon Warns Leaders on AI Disruption as May 2026 Earnings Shift Strategy appeared first on Tomaro Group.

Microsoft confirmed fixes for several vulnerabilities already seen in active exploitation, including elevation-of-privilege bugs in the Windows kernel and a remote code execution flaw in a widely deployed Office component. The Cybersecurity and Infrastructure Security Agency added multiple entries to its Known Exploited Vulnerabilities catalog within 24 hours, giving federal agencies tight deadlines to patch.

For business leaders and IT buyers, the bigger story is what this cycle says about software risk in 2026. Enterprise stacks are heavier, vendor sprawl is wider, and the pressure to patch fast keeps colliding with the reality of staffing shortages. Teams looking at how to staff around this kind of pressure can compare notes with our reporting on how skills-based hiring is changing IT career paths, since security and patch operations are now central to those job descriptions.

What shipped in the May 2026 update

Microsoft addressed more than 70 vulnerabilities in the May release, with a handful rated critical. The most attention went to a zero-day in the Windows Common Log File System driver, which researchers tied to ransomware activity over the past six weeks. A second zero-day affected the Scripting Engine and could be triggered through a crafted document or web page.

Outside Microsoft, the month also brought new advisories from Ivanti, Fortinet, and SAP. Ivanti issued another round of Connect Secure patches, the latest in a chain that began with the high-profile zero-day disclosure in January. SAP closed a critical flaw in NetWeaver that scored a 10.0 on the CVSS scale and is now under active monitoring by enterprise SOC teams.

Why this matters for businesses

The pattern is hard to ignore. Software supply chain risk is no longer a niche topic for security blogs, it is a board-level conversation. Companies running federated identity, VPN appliances, and ERP systems are now expected to patch within hours, not weeks. The cost shows up in overtime, in delayed projects, and in the budget lines that fund detection tools.

For smaller firms, the message from this month’s cycle is simpler. Keep an inventory of every internet-facing appliance, subscribe to vendor advisories, and treat Patch Tuesday as a fixed business event. The same discipline that made career growth steps work in business applies to patch management. It rewards consistency, not heroics.

Open source software is shifting too

While Microsoft dominated headlines, the open source world had its own big May. The Linux Foundation published an update to its security baseline for critical projects, and the OpenJS Foundation flagged renewed social engineering attempts against maintainers, echoing the XZ Utils episode from 2024. Reuters covered the renewed maintainer pressure in detail, and the takeaway is that human risk inside small open source teams is still the weakest link in the global software stack.

Cloud providers responded by tightening their software bill of materials policies. AWS and Google Cloud both expanded SBOM requirements for marketplace listings this month, a move that lines up with new procurement rules in the European Union and parts of the United States.

AI coding tools enter the patch conversation

Another shift this month is how AI assistants are being used inside patch work itself. Several large enterprises confirmed they now run AI-generated remediation scripts through staging before deployment, with human review at the final step. The trend has its critics, but adoption keeps rising. Readers tracking that career shift can see our coverage on why AI skills are now the fastest route to career growth, which touches on how security and DevOps roles are absorbing these tools.

GitHub also expanded its Copilot autofix feature to cover more vulnerability classes during the month, and JetBrains pushed updates to its on-device AI tooling. For now, the human in the loop stays. Compliance teams are not yet comfortable letting agents patch production without sign-off.

What IT leaders should do this week

The short list is straightforward. Apply the May Microsoft updates on a tested ring within seven days. Validate that Ivanti Connect Secure, Pulse, and Policy Secure appliances are on the current build. Audit any SAP NetWeaver instance exposed to untrusted networks. Confirm that endpoint detection rules cover the new CLFS exploitation patterns published by CISA.

Leaders who want a wider view of how technology pressure is reshaping team structure can also look at our piece on corporate leadership skills that build strong teams, since patch fatigue is now a retention issue, not only a security one.

Bottom line

May 2026 will be remembered as a heavy month for software security, but not an unusual one. The cadence of zero-days, vendor advisories, and AI-assisted fixes is becoming the steady state of enterprise IT. Companies that build patch discipline into normal operations will spend less time firefighting later in the year.

I will keep tracking the rest of the May rollouts and follow up if any of the active exploits widen in scope before the June cycle.

The post May 2026 Patch Tuesday Hits Hard as Microsoft and Ivanti Push Fresh Fixes appeared first on Tomaro Group.

The new model arrived on Wednesday, May 20, 2026, and it sits at the top of the Claude 4 family. Anthropic is positioning it as a serious tool for coding, research, and long-running agent tasks. Early users on developer forums say the difference is noticeable, especially on multi-step jobs that used to break older models.

This release matters because the AI industry is no longer just chasing benchmark scores. Companies want models that can hold context for hours, use tools without supervision, and ship reliable output. Opus 4.7 is built around that goal.

For more on how AI is reshaping work right now, see our recent coverage on AI skills becoming the fastest route to career growth and how skills-based hiring is changing promotions.

What Is New in Claude Opus 4.7

Opus 4.7 is the headline model in the Claude 4.7 family. Anthropic kept the same naming pattern, so developers calling the API will use the model string claude-opus-4-7. The previous generation, Claude 4.6, included both Sonnet and Opus versions. For now, 4.7 ships only as Opus.

The model focuses on three things. First, longer agent runs. Second, better coding accuracy. Third, more reliable tool use across third-party connectors like Slack, Google Drive, Linear, and Notion.

I tested it briefly through Claude Code, the company’s agentic coding tool. It handled a small refactor cleanly and asked for confirmation before touching anything outside its working folder. That kind of restraint is what enterprise teams have been asking for.

Why Agentic AI Is the Real Story in 2026

Agentic AI is the term for systems that plan, act, and self-correct across many steps. Think of an assistant that books your travel, files an expense report, and updates your calendar without you stitching it together.

According to a recent Reuters report on enterprise AI adoption, corporate spending on agent-style AI tools is set to climb sharply through 2026 as firms move past chatbots and into automation. Analysts at CNBC have noted the same shift, with cloud providers reporting that agent workloads are growing faster than basic chat traffic.

That is the backdrop for Opus 4.7. Anthropic is not the only player here. OpenAI, Google DeepMind, and Meta are all pushing similar capabilities. But Anthropic has carved out a reputation for safety-focused releases, and that is helping it win contracts with banks, law firms, and healthcare groups.

How Businesses Are Using the New Model

Three use cases keep coming up in conversations I have had this week.

Software teams are using Opus 4.7 inside Claude Code to handle pull request reviews and bug triage. The model can read a repo, understand the issue, propose a fix, and run tests before flagging the human.

Knowledge workers are using Claude Cowork, Anthropic’s desktop app for non-developers, to pull data from spreadsheets, draft client emails, and build slide decks. The new model handles longer documents without losing the thread.

Researchers are using it for literature review and synthesis. A scientist at a university lab told me on background that the model now writes citations correctly far more often than the previous version, which used to invent sources.

Pricing and Access

Anthropic has not changed its core pricing tiers with this release. Claude Opus 4.7 is available through the Claude API, the web app at claude.ai, the mobile app, and the desktop app. It also powers Claude Code and the beta browser, Excel, and PowerPoint agents.

The BBC’s technology desk covered the broader industry context this week, noting that AI compute costs are still the biggest barrier for smaller firms looking to adopt frontier models. Anthropic offers a smaller model, Claude Haiku 4.5, for teams that need lower cost per request.

What Comes Next

The next thing to watch is whether Anthropic releases a Sonnet 4.7 model. The 4.6 family had both Sonnet and Opus, and many developers prefer Sonnet for its balance of speed and cost. Anthropic has not commented publicly on its release timeline.

I will keep an eye on benchmarks too. Independent testing usually lags official launches by a few weeks, so we should know within a month how Opus 4.7 stacks up against the latest from OpenAI and Google.

For now, the message from Anthropic is clear. The company believes the next stage of AI is about agents that can do real work, and Opus 4.7 is their bet on getting there first

The post Anthropic Rolls Out Claude Opus 4.7 With Stronger Agentic Skills appeared first on Tomaro Group.

For readers tracking how technology and consumer trends are shaping daily life, this rollout fits with the broader move toward practical AI hardware in 2026 and a steady stream of new mobile apps changing how people use their phones. The May wave is less about flashy concepts and more about real devices going on sale.

Samsung Galaxy Z Series and Smart Glasses Tipped for July

Reports out of Seoul on May 13 indicate Samsung will hold its next Unpacked event in early July, with the Galaxy Z Fold 8 and Galaxy Z Flip 8 expected to share the stage with a new pair of smart glasses. The glasses are tipped to run on a Qualcomm chip and connect to Galaxy phones for voice queries, navigation, and camera capture. This would mark Samsung’s first consumer-ready smart eyewear after years of prototypes.

Industry analysts at Reuters have noted that smart glasses are becoming the new battleground for big tech, with Meta, Google, and now Samsung all pushing wearable displays as the next interface after smartphones. Pricing for the Samsung pair has not been confirmed, but leakers suggest a launch price in the $400 to $500 range.

Moto G37 Series Lands in India With Dimensity 6400 Chip

Motorola officially launched the Moto G37 and Moto G37 Power on May 19. The phones run on MediaTek’s Dimensity 6400 chipset, support 5G across 13 bands, and ship with a 6.72-inch display rated at 120Hz. The G37 Power adds a 6,720mAh battery, which is one of the larger cells in the budget category this year.

Both models come with Android 15 out of the box and a promised two years of OS updates. Pricing starts at ₹11,999 (around $145) for the base 4GB variant. The launch keeps Motorola competitive against Realme and Redmi in the sub-$200 segment, where most of the volume sales happen in markets like India, Brazil, and Indonesia.

iQOO 15T and TWS 5i Earbuds Refresh the Mid-Range

iQOO confirmed the 15T smartphone on May 20, with full retail availability rolling out across Asia this week. The phone uses a Snapdragon 8s Gen 3 processor, packs a 6.78-inch AMOLED panel, and includes a 5,500mAh battery with 120W fast charging. iQOO also released the TWS 5i earbuds on May 21, priced under $35, with active noise cancellation and 12.4mm drivers.

These launches show how the mid-range segment continues to absorb features that were flagship-only just two years ago. If you’ve been following how technology spending shifts during economic uncertainty, you’ll notice buyers are gravitating toward devices that deliver 80 percent of flagship performance at half the price.

Editors Pick Their May 2026 Standouts

BGR published its “9 New Gadgets To Look Out For In May 2026” list on May 18, highlighting the Anker Soundcore Boom 3i waterproof speaker, the JBL Flip 7 update, and a refreshed Garmin Forerunner watch. TechRadar’s monthly review roundup, also published in early May, called out the new Bose QuietComfort Ultra 2 headphones and a redesigned DJI action camera as the standouts among dozens of devices reviewed.

Yanko Design’s “5 Best Tech Gadgets of May 2026,” posted May 12, leaned toward design-led picks including a modular desk lamp with built-in wireless charging and a compact e-ink notebook from Boox. The common thread across all three publications is that May releases are practical rather than experimental, with companies focused on improving battery life, audio quality, and software polish.

OpenAI and Jony Ive Gadget Still on the Horizon

The much-discussed OpenAI hardware project, designed in partnership with former Apple design chief Jony Ive, has not launched yet. According to coverage from CNBC earlier this year, the device is expected to be a voice-first companion gadget without a traditional screen. Reports suggest a late 2026 or early 2027 launch window. May has brought no official update from OpenAI, but the conversation around AI-native hardware continues to shape how companies like Samsung and Apple plan their next moves.

For readers interested in how the artificial intelligence sector is reshaping consumer products, the wait for this device is one of the most-watched stories in tech right now.

What to Watch Next

The next two weeks should bring more activity. Sony is expected to refresh its WH-1000X series headphones at IFA preview events, Google has hinted at a mid-cycle Pixel feature drop, and Apple’s WWDC keynote on June 9 will likely set the tone for iPhone 17 expectations. Anyone shopping for a new phone, watch, or pair of earbuds this month has more solid options than the same period last year, with fewer compromises at every price level.

For ongoing coverage of the latest in software and devices, keep checking back. May 2026 is shaping up as a quietly strong month for consumer tech, even without a single headline-grabbing launch from Apple or Google.

The post Gadget Launches Heat Up in May 2026 as Smart Glasses and Foldables Take Center Stage appeared first on Tomaro Group.

I have been tracking the AI race closely, and this release feels different from the usual model bumps we have seen over the past year. Opus 4 is built for sustained, multi-step work. Sonnet 4 brings most of those gains to a faster, cheaper tier that developers can use at scale.

If you follow how AI skills are now the fastest route to career growth, this launch matters. It changes what entry-level coders and senior engineers can expect from their tools. Readers who track skills-based hiring trends will see why employers are paying close attention.

What Opus 4 and Sonnet 4 Actually Do

Opus 4 scored 72.5 percent on SWE-bench, the standard benchmark for real software engineering tasks, according to Anthropic’s own announcement. Sonnet 4 came in at 72.7 percent, which is striking because Sonnet runs at a fraction of the cost.

Both models can run for hours on a single task without losing track of context. Anthropic says one customer ran Opus 4 on a coding job for seven straight hours. That kind of stamina was not possible in earlier versions.

The models also include a new feature called extended thinking with tool use. The AI can pause, search the web, run code, and then come back to the original task. This is the part that excites engineers I have spoken with.

Why Coders Are Paying Attention

GitHub announced it will use Sonnet 4 as the model behind a new coding agent inside GitHub Copilot, Reuters reported. Cursor, Replit, and Rakuten also confirmed they are integrating the new models.

The pricing stays the same as Claude 3 Opus and Sonnet. That is unusual. Most AI labs raise prices when capability jumps. Anthropic kept Opus 4 at $15 per million input tokens and Sonnet 4 at $3 per million.

For context, OpenAI’s GPT-4.1 launched in April at similar price points but with weaker coding scores on independent tests, according to CNBC’s coverage of the AI model race.

What Changed Under the Hood

Anthropic trained both models with a focus on agentic behavior. That means the AI can plan, take actions, check its work, and adjust without a human prompting each step. Memory is also improved. Opus 4 can write notes to files during long tasks and read them later.

Safety testing came with the launch. Anthropic deployed Opus 4 under what it calls ASL-3 standards, a stricter tier than earlier models. The company said this was a precaution given the model’s capabilities, not a response to a specific risk.

What This Means for Workers

I think the biggest shift is for mid-level engineers. Opus 4 can handle tasks that used to take a full day in a few hours. That does not eliminate the job. It changes what the job looks like.

Junior developers should learn to direct these tools well. Senior developers should focus on architecture and review. The middle is where the pressure builds.

Companies that move fast on integration will pull ahead. Companies that wait six months will be behind by a year in productivity terms.

Bottom Line

Claude Opus 4 and Sonnet 4 are not just incremental updates. They push what AI agents can do in real work settings. Whether that is good news depends on where you sit in the labor market. For now, the models are live, the prices held steady, and the coding world has a new benchmark to chase.

The post Anthropic Launches Claude Opus 4 and Sonnet 4 With Major Coding Gains appeared first on Tomaro Group.

The breach affects less than 1% of Coinbase users, but the data exposed is serious. Names, addresses, partial Social Security numbers, masked bank account details, government ID images, and account balances were all accessed. No passwords, private keys, or funds were taken, according to the company.

If you’re tracking how this fits into the broader threat landscape, our technology coverage hub and our running cybersecurity news section have more context on related incidents. Workforce and insider risk also tie into workplace trends shaping 2026, which is worth a look for HR and security leads.

What Actually Happened at Coinbase

The attackers did not break in through code. They bribed customer support contractors based outside the United States to pull internal records. The criminals then demanded a $20 million ransom from Coinbase to keep the stolen data quiet.

Coinbase refused to pay. Instead, the company posted a $20 million bounty for information leading to the arrest of those responsible. Chief Security Officer Philip Martin said the firm fired the involved support agents and referred them to law enforcement.

The Securities and Exchange Commission opened a separate inquiry into whether Coinbase overstated user numbers before its 2021 public listing. That probe is not tied to the breach itself, but the timing has put extra pressure on the stock. Shares dropped more than 7% the day the news broke, according to reporting from Reuters.

The Insider Threat Problem Is Getting Worse

The Coinbase attack is part of a clear pattern in May 2026. Insider-driven breaches now make up a growing share of high-cost incidents at US firms. Verizon’s 2026 Data Breach Investigations Report flagged a sharp rise in cases where staff or contractors were paid, pressured, or tricked into leaking data.

Banks, exchanges, and large retailers are the main targets. The attackers want identity data they can resell or use for SIM-swap attacks on crypto wallets. That makes anyone holding KYC documents a high-value target.

For business leaders trying to keep teams secure, the lesson is simple. Background checks and access controls matter just as much as firewalls. Our piece on corporate leadership skills that build strong teams touches on the trust and accountability side of this issue.

Marks and Spencer, Co-op, and the UK Retail Wave

Across the Atlantic, UK retailers are dealing with their own May crisis. Marks and Spencer is still recovering from a ransomware attack tied to the Scattered Spider group. The company has paused online clothing orders and lost an estimated £300 million in operating profit for the year.

Co-op and Harrods reported intrusions in the same window. The UK National Cyber Security Centre warned other retailers to review their identity verification steps, especially around help desk password resets, which was the entry point used in several cases. The BBC has tracked the M and S timeline in detail.

What This Means for Everyday Users

If you have a Coinbase account or hold ID data with any major service, take three steps this week. First, turn on hardware-based two-factor authentication, not SMS. Second, freeze your credit at all three bureaus. Third, watch for phishing calls or texts that reference real details about your account, because attackers will use the leaked data to sound convincing.

Coinbase will reimburse customers who were tricked into sending funds because of this breach. The company is also moving some support operations to the US and rolling out additional ID checks for high-value withdrawals.

For workers thinking about a pivot into security roles, demand is climbing fast. Our coverage of how AI skills are reshaping career growth in 2026 overlaps with the security hiring boom, since AI-driven threat detection is now a core skill in most SOC job postings.

The Bigger Picture

May 2026 has been a rough month for trust in digital platforms. The Coinbase incident, the UK retail attacks, and a fresh round of healthcare breaches in the US all share one root cause. Human access points are the soft spot. Software is getting harder to crack, so attackers are buying their way in through people.

Companies that invest in support staff training, tighter access logs, and faster incident response will weather this better. Those that treat security as an IT-only problem will keep showing up in headlines like this one.

I’ll keep tracking the Coinbase investigation as the SEC and DOJ updates roll out. For now, the safe move for users is to assume your data is in motion and lock down accounts accordingly.

The post Coinbase Confirms May 2026 Data Breach Linked to Insider Threat as SEC Probe Widens appeared first on Tomaro Group.

The disclosure landed on May 20, 2026, and quickly became one of the largest software supply chain incidents of the year. A group calling itself TeamPCP claimed responsibility and demanded a $50,000 ransom from GitHub, according to multiple security outlets. GitHub, owned by Microsoft, has not confirmed any ransom payment.

For more context on tech and security trends, see our coverage of skills-based hiring in 2026 and our full cybersecurity news section.

What happened inside GitHub

The attack started on an employee device. Hackers compromised a coding tool the employee had installed, then used that foothold to reach internal systems. From there, they pulled data out of about 3,800 internal repositories.

GitHub stresses that these were internal repos, not customer-owned code stored on the public platform. Public and private repositories belonging to users were not part of the stolen data set, based on the company’s current statement.

Still, the contents of internal repos can include service configuration files, deployment scripts, and notes that could help future attackers. Security researchers say even small leaks of that kind can lead to follow-on attacks on cloud services and CI/CD pipelines.

How the compromise spread

According to reporting from TechCrunch, the entry point was a third-party extension used by the GitHub employee. Once the tool was hijacked, the attackers harvested credentials and used them to access internal infrastructure.

This pattern is familiar. Over the past year, attackers have leaned on developer tools, browser extensions, and open source packages because they sit close to sensitive systems. A single hijacked plugin can hand attackers keys to many environments at once.

Eric Geller at Cybersecurity Dive noted the attack is “the latest example of hackers’ intense focus on open source packages.” That focus has pushed many large platforms to tighten how they review and sandbox developer tooling.

TeamPCP and the ransom demand

The attackers, identifying as TeamPCP, asked for $50,000 to keep the stolen contents private. The figure is small compared with ransom demands seen in healthcare or municipal hacks, which often run into the millions. Some researchers think the low number is meant to push GitHub toward a quick settlement.

GitHub has stayed quiet on whether it engaged the group at all. The company says affected teams have been notified, secrets have been rotated, and the employee account at the center of the incident has been locked down.

If you follow finance and business risk topics, our piece on corporate leadership skills touches on how teams handle moments like this.

Why this matters for developers

GitHub powers a huge share of software development worldwide. When the platform itself is touched by a breach, every team that builds on it pays closer attention.

Three near-term concerns stand out. First, any tokens, API keys, or webhook secrets that lived in those internal repositories must be treated as exposed. Second, anyone using a coding extension similar to the one abused here should audit installed tools. Third, build pipelines that pull dependencies from compromised sources may need fresh review.

The U.S. Cybersecurity and Infrastructure Security Agency has warned for months about supply chain risk. The CISA known exploited vulnerabilities catalog continues to add software supply chain entries each week. This incident fits that pattern.

The wider May 2026 picture

The GitHub story arrived during an already heavy month for security teams. The Canvas hack tied to Instructure disrupted schools and universities across the United States, with cybercrime group ShinyHunters claiming access to data on roughly 275 million teachers and students. The BBC reported that some universities lost access during finals week.

Verizon’s 2026 Data Breach Investigations Report, released earlier in May, found that vulnerability exploitation has overtaken phishing as the top entry point for breaches. The GitHub case lines up with that finding. The attack did not start with a tricked employee clicking a link. It started with a flaw in a trusted tool.

For readers tracking how artificial intelligence intersects with security, our look at AI skills and career growth covers the demand for security talent that can handle AI-driven threats.

What GitHub is doing next

GitHub says it is reviewing every approved developer extension and tightening how employee devices connect to internal systems. The company has also expanded its bug bounty scope to cover supply chain abuse paths.

For users, GitHub recommends rotating any personal access tokens created before May 20, 2026, reviewing third-party application permissions in account settings, and enabling secret scanning on private repos. Organizations using GitHub Enterprise should audit recent commits for unexpected changes.

The investigation is ongoing. Federal authorities have been informed, though GitHub has not named which agencies are involved.

Bottom line

The GitHub breach is a sharp reminder that the tools developers trust most often become the path attackers take. A single compromised extension on one employee’s machine led to thousands of repositories being pulled. The fallout will shape how Microsoft and other big platforms vet developer software for the rest of the year.

Stay with Tomaro Group for updates as the investigation moves forward.

The post GitHub Breach Hits 3,800 Repositories After Hacked Coding Tool appeared first on Tomaro Group.