Search: “Windows IKE Extension”

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable Blog·Sep 8, 18:07 UTC · 8d agoVulnerability in the wildCVE-2026-81963CVE-2026-858801

Microsoft Patch Tuesday for January 2023 fixed actively exploited zero

Security Affairs·Jan 11, 08:05 UTC · Jan 11, 2023Vulnerability in the wildCVE-2023-21674CVE-2023-21549CVE-2023-21561+58 CVEs1

Chinese Hacker Uses DeepSeek AI to Orchestrate Vulnerability Exploits

Infosecurity Magazine·Jul 31, 15:00 UTC · Jul 31, 2026Vulnerability in the wildCVE-2026-33017CVE-2026-21858CVE-2025-68613+5 CVEs

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero

Security Affairs·Apr 15, 05:18 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-32201CVE-2026-33825CVE-2026-33827+1 CVEs

Microsoft September 2022 Patch Tuesday fixed actively exploited zero

Security Affairs·Sep 14, 19:59 UTC · Sep 14, 2022Vulnerability in the wildCVE-2022-37969CVE-2022-23960CVE-2022-34700+4 CVEs

Microsoft's Latest Security Update Fixes 64 New Flaws, Including a Zero

The Hacker News·Oct 12, 07:11 UTC · Oct 12, 2022Vulnerability in the wildCVE-2022-37969CVE-2022-24521CVE-2022-34718+6 CVEs

Microsoft Patch Tuesday for April 2026

Cisco Talos·Apr 14, 20:27 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-23666CVE-2026-32157CVE-2026-32190+29 CVEs

August 2026 CVE Landscape

Insikt Group catalogs 73 high-impact August 2026 CVEs (43 Very Critical), including PaperCut, Zimbra, and Metabase flaws actively exploited or weaponized.

Recorded Future's Insikt Group identified 73 high-impact vulnerabilities in August 2026, 43 rated Very Critical, spanning 45 vendors with Microsoft accounting for roughly 11%. 31 vulnerabilities surfaced via CISA's KEV catalog, with others validated via open sources, vendor telemetry, and honeypot data. New Nuclei detection templates were released for CVE-2025-62593 (Ray), CVE-2026-72898 (Metabase), and CVE-2026-9198 (IBM Langflow). The report also highlights two AI-assisted operations: UAT-10147 exploited Zimbra, AjaxPro, Nacos, and Telerik servers before using DeepAudit and PentestGPT post-compromise, while a separate Chinese-speaking actor weaponized Hermes Agent and DeepSeek in a failed attempt.

Recorded Future·Sep 8, 00:00 UTC · 9d agoVulnerability in the wildCVE-2025-62593CVE-2026-72898CVE-2026-9198+4 CVEs1