News · via Microsoft Security Response Center
CVE-2026-85870 Windows Common Log File System Driver Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
Microsoft
Coverage tagged "Microsoft".
News · via Microsoft Security Response Center
CVE-2026-72937 Windows Storage Port Driver Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-69351 Windows Universal Plug and Play (UPnP) Device Host Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-69334 Windows Volume Manager Extension Driver Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-81352 Web Media Extensions Remote Code Execution Vulnerability
Updated product information in the Software Update table. This is an informational change only.
News · via Microsoft Security Response Center
CVE-2026-32176 SQL Server Elevation of Privilege Vulnerability
Added SQL software to the Security Updates table. Customers that are running supported version of SQL are encouraged to update to the indicated version to be protected from this vulnerability.
News · via The Record
Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting domains that were part of the…
News · via SOCRadar
Top RCE Vulnerabilities
Top RCE Vulnerabilities A remote code execution (RCE) vulnerability is a software flaw that lets an attacker run their own code on a target system from a remote location. Exploiting vulnerabilities…
News · via SecurityWeek
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
News · via Microsoft Security
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Uncovering the shadow world of a phishing kit ecosystem Storm-3119: YAM Store, the power broker Storm-2990: The Iron Man System phishing kit Downstream activity from Storm-2990 phishing kits…
News · via CyberScoop
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Microsoft collaborated with Japanese authorities, Health-ISAC and several cybersecurity companies to dismantle an expansive, seemingly disconnected ecosystem of Chinese-language cybercrime tools and…
News · via SOCRadar
October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days
October 2026 Patch Tuesday: 1,413 Flaws, 3 Zero-Days Microsoft’s October 2026 Patch Tuesday, released on October 13, 2026, fixes 1,413 vulnerabilities across Windows, Office, Exchange Server…
News · via Rapid7
Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce
OverviewWhile performing continuous red teaming exercises through Rapid7’s Vector Command service, Rapid7 discovered CVE-2026-108065, an SQL Injection vulnerability (CWE-89) in Channel Software…
News · via The Record
CISA warns of new Ivanti bug being exploited as latest Patch Tuesday breaks records
The sixth exploited Ivanti bug this year drew attention from the feds and researchers, while a severe Microsoft vulnerability was one of more than 1,400 listed for Patch Tuesday.
News · via Malwarebytes Labs
Update Windows: Record Patch Tuesday fixes flaw already under attack
Microsoft’s October Patch Tuesday release addresses a record-breaking 1,413 vulnerabilities, including an actively exploited Windows Shell zero-day and two other publicly disclosed flaws. Just when…
News · via BleepingComputer
Microsoft: Recent Windows updates may trigger Remote Desktop failures
Microsoft has confirmed that non-admin users may be unable to connect to devices via Remote Desktop after installing recent Windows updates if the "Administrator protection" security feature is…
News · via Qualys
Microsoft Patch Tuesday, October 2026 Security Update Review
Microsoft has released its October 2026 Patch Tuesday security updates, addressing vulnerabilities across its products and services. As organizations continue to navigate an evolving threat…
News · via Infosecurity Magazine
Microsoft Breaks Patch Tuesday Record Again with 1400+ CVEs
Microsoft issued its largest ever round of security updates in the October Patch Tuesday
News · via Help Net Security
Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951)
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild…
News · via SecurityWeek
Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.