60
60
March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-day
60
60
60
60
October 2018 Patch Tuesday: Microsoft fixes 49 flaws, one APT-wielded zero-day
60
60
60
Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited
60
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)
60
Microsoft fixes exploited WordPad, Skype for Business zero-days (CVE-2023-36563, CVE-2023-41763)
60
60
60
60
60
60
⚡ Weekly Recap: Instagram Account Hacks, Android Zero
60
Microsoft fixes many zero-days under attack
60
IT threat evolution Q2 2022
60
60
60
60
60
60
MOSQUITO attack allows to exfiltrates data from Air-Gapped computers via leverage connected speakers
45
45
57
Microsoft breaks Patch Tuesday record with 974-CVE deluge
Microsoft's record 974-CVE Patch Tuesday ships two exploited Windows zero-days, while Adobe's StyleSmuggler zero-day (CVE-2026-75650) gives unauthenticated RCE in Magento.
Microsoft's September Patch Tuesday addresses 974 CVEs, including two zero-days already under exploitation: CVE-2026-85880, a Windows ALPC privilege escalation leading to SYSTEM via sandbox escape, and CVE-2026-81963, a Windows Update Stack privilege escalation. Adobe patched 172 CVEs, including the max-severity StyleSmuggler zero-day CVE-2026-75650 in Magento and Adobe Commerce, which Sansec reports is being exploited since September 4 to inject PHP into templates and install a C2-connected backdoor. CISA added CVE-2026-85880, CVE-2026-81963, and CVE-2026-75650 to its Known Exploited Vulnerabilities Catalog with patch deadlines of September 22 and September 11. The piece also notes Google-patched Chrome V8 zero-day CVE-2026-85046 lacks a Microsoft advisory for Edge, and flags nine Exchange Server flaws including remote unauthenticated RCE CVE-2026-55007.
90
Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited
CISA confirms exploitation of two Windows zero-days among 973 Microsoft patches; 22,000 Exchange servers remain unpatched.
Microsoft's September Patch Tuesday sets a record with 973 vulnerabilities, and CISA confirms CVE-2026-81963 and CVE-2026-85880 are being exploited, giving federal agencies until September 22 to patch. Nightwing estimates over 22,000 corporate Exchange servers are unpatched against weaponized exploit code. Analysts describe CVE-2026-81963 as an early link in ransomware chains where phishing leads to privilege escalation, and note year-to-date Microsoft disclosures exceed 2,600 bugs.
80
60
60
60
Network Attack Trends: February
60
Microsoft Fixes Two Zero
60
60
60
45
60
60