Microsoft announced a new initiative to reduce security risks for on-premises server workloads such as Exchange Server, SharePoint Server, and Skype for Business Server. The initiative focuses on improving security posture by providing guidance, encouraging migration to cloud services, and hardening on-premises products with a baseline security mode. This mode aims to simplify secure configuration, accelerate patch deployment including automatic updates, and introduce emergency mitigations to reduce exposure to emerging threats. The goal is to reduce manual security management while maintaining administrator control and adapting protections as threats evolve.
Siemens, Schneider Electric, and Rockwell Automation released multiple security advisories addressing vulnerabilities in industrial control systems (ICS) products. Siemens issued 17 advisories covering critical to medium-severity flaws in various products including Simatic S7-1500 CPUs and Ruggedcom devices. Schneider Electric disclosed two high-severity vulnerabilities affecting Pro-face and Sage RTUs. Rockwell Automation fixed two vulnerabilities in 1732E ArmorBlock, including a critical flaw allowing unauthenticated password changes leading to admin takeover. ABB reported possible probing activity against a dynovaPRO credential reset vulnerability but no confirmed exploitation. Additional advisories from CISA and CERT@VDE cover other ICS products. Patches and mitigations are available for many of these issues.
Microsoft's October 2026 Patch Tuesday includes security updates addressing 1415 vulnerabilities across multiple products, with 85 marked as critical. Among these, 67 are remote code execution vulnerabilities. One vulnerability, CVE-2026-96951, a security feature bypass in Windows Shell involving command injection, has been exploited in the wild. Other notable vulnerabilities affect Windows Active Directory Domain Services, Microsoft Exchange Server, Windows Hyper-V, Microsoft Office Excel, Microsoft QUIC, and various Windows components. The vulnerabilities have CVSS base scores ranging from 7.0 to 9.8, indicating high severity. Microsoft has released patches for these issues as part of the monthly update cycle.
Microsoft's October 2026 Patch Tuesday addresses a record 1,411 vulnerabilities, including three zero-day flaws—one actively exploited and two publicly disclosed. This update is significant due to the volume of fixes and the presence of zero-day vulnerabilities requiring attention.
Microsoft has released the Windows 10 KB5126657 extended security update as part of the October 2026 Patch Tuesday. This update includes multiple security fixes and some bug fixes and changes. No specific vulnerabilities or exploits are detailed in the provided information.
Microsoft released patches addressing 1,417 vulnerabilities on October 13, 2026, including 76 critical issues. Among these, seven critical vulnerabilities require no customer action. One vulnerability was publicly disclosed before the patch release, and one is already exploited in the wild. Notable vulnerabilities include a Windows Shell security feature bypass (CVE-2026-96951) that allows bypassing the "Mark of the Web" feature, facilitating code execution if a user opens a malicious file, and a .NET Framework security feature bypass (CVE-2026-108398) that could bypass application control. Additionally, Windows DHCP Server and Microsoft Exchange Server have multiple critical remote code execution vulnerabilities. The update also addresses numerous Office vulnerabilities. Microsoft has released patches for these issues, and customers should apply updates promptly.
Microsoft released cumulative updates KB5127648 and KB5126653 for Windows 11 versions 23H2, 24H2, 25H2, and 26H2. These updates include the October 2026 Patch Tuesday security patches addressing hundreds of vulnerabilities, along with various bug fixes and new features such as emoji updates, File Explorer improvements, Bluetooth enhancements, and accessibility features. The updates are mandatory and unify fixes across the supported Windows 11 versions.
Microsoft's FORGE Lab is advancing AI-native vulnerability research, discovering and helping remediate numerous vulnerabilities across Windows and open-source projects including the Linux kernel. Their work from May to September 2026 led to 140 CVEs assigned for Windows and 155 validated reports for open-source projects. The research highlights challenges beyond discovery, emphasizing the need for scalable validation and remediation processes to keep pace with AI-generated findings. Key lessons include shifting focus from capability to scale, optimizing reasoning economics, and coordinating validation and remediation efforts. This approach aims to sustain vulnerability research at scale by integrating automated validation tools and human coordination.
Critical10.0KEVEPSS 98%Check Point ResearchCVE-2026-72898
The threat intelligence report from September 14, 2026, details multiple cyber incidents including data breaches, vulnerabilities, and AI-related threats. Notably, a data breach at Mathspace was caused by exploitation of CVE-2026-72898, a SQL injection vulnerability in the self-hosted Metabase tool, exposing user names, emails, usernames, and locations. Other significant vulnerabilities include Microsoft’s Patch Tuesday addressing 974 flaws including privilege escalation zero-days, and GitLab’s critical path traversal vulnerability CVE-2026-85706 allowing unauthenticated arbitrary file reads. MikroTik RouterOS vulnerabilities enabling passwordless SSH and privilege escalation were also fixed. The report includes AI threats involving prompt evasion and sandbox escapes. Check Point IPS provides protections for several mentioned vulnerabilities. The report does not specify affected versions for CVE-2026-72898. No CVSS score is provided for this vulnerability.
Microsoft addressed a bug that caused Microsoft Teams and Outlook to fail launching on ARM-based Windows devices following updates released since the August 2026 Patch Tuesday. This issue affected users on ARM Windows PCs, preventing normal operation of these applications.
Microsoft released the September 2026 Patch Tuesday updates to fix a known issue that caused Windows desktop settings to be lost or reset on some devices. This bug affected user configurations but was addressed by the official update.
Major chipmakers AMD, Arm, and Nvidia have released security advisories addressing multiple vulnerabilities in their GPU-related products. AMD fixed a NULL pointer dereference flaw in its Linux GPU kernel driver that could cause system crashes and denial-of-service conditions. Arm patched nine vulnerabilities in its Mali GPUs affecting kernel and userspace drivers, potentially leading to memory access issues and denial-of-service. Nvidia updated its Triton Inference Server for Linux to fix two high-severity flaws that could cause denial-of-service, information disclosure, and data tampering. These patches have been released or are scheduled for release in stages across affected product lines.
Multiple critical and high-severity vulnerabilities affecting industrial control system (ICS) products from Schneider Electric, Siemens, Aveva, and Rockwell Automation were disclosed and patched in the September 2026 Patch Tuesday cycle. Notably, Schneider Electric fixed a critical authentication vulnerability in Modicon M580 controllers (CVE-2026-3869, CVSS 9.2), and Siemens addressed critical flaws in several products including Reyrolle 7SR5 and Industrial Edge Management. Aveva and Rockwell Automation also released patches for high-severity issues in their ICS components. These vulnerabilities could impact the security of critical industrial infrastructure if left unpatched.
Microsoft's September 2026 Patch Tuesday release addresses 973 vulnerabilities across multiple products, including 113 critical issues. Among these, several vulnerabilities have been exploited in the wild, notably CVE-2026-81963 (Windows Update Stack) and CVE-2026-85880 (Windows ALPC), both elevation of privilege flaws with CVSS scores of 7.8. The update also includes multiple remote code execution vulnerabilities with high CVSS scores, such as CVE-2026-69676 (Windows Kerberos) with a score of 8.8 and CVE-2026-69730 (Windows DNS Server) with a score of 9.8. Microsoft highlights some vulnerabilities as more likely to be exploited and others as less likely. The vulnerabilities affect a broad range of Microsoft products including Windows components, Azure services, and Microsoft SQL Server. No explicit patch links are provided in the source, but these vulnerabilities are part of the official monthly security update. The vendor manages remediation through this update.
Microsoft released the Windows 10 KB5122878 extended security update as part of the September 2026 Patch Tuesday. This update includes security fixes addressing a record 966 vulnerabilities across Microsoft products, including two zero-day exploits that were actively exploited. It also contains bug fixes and improvements such as enhanced Secure Boot certificate deployment, time zone adjustment for Morocco, improved logging for OMA DM Client, and fixes for Remote Desktop audio redirection and BitLocker Group Policy issues. No new features are included, and Microsoft reports no known issues with this update.
Microsoft's September 2026 Patch Tuesday addresses a record 966 vulnerabilities, including two zero-day flaws that are actively exploited. This update represents a significant security release covering a broad range of issues across Microsoft products.
A known issue affecting Microsoft Teams and the new Outlook on ARM-based Windows devices causes crashes and launch failures after installing August 2026 Patch Tuesday updates. The problem impacts devices running Windows 11 24H2 or later, particularly those that have not installed Microsoft Store updates. Microsoft has provided a temporary workaround involving updating the Auto Super Resolution Package and is working on a permanent fix in a future Windows update.
Microsoft has confirmed that .NET Framework updates released as part of the August 2026 Patch Tuesday are breaking printing and PDF export in WPF applications. [...]
Microsoft has released security patches to address a Windows zero-day vulnerability known as "LegacyHive," disclosed after the July 2026 Patch Tuesday. [...]