Search: “windows”

15,567 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 3954 Vulnerability 3844 Ransomware 2562 Exploit / PoC 1723 Threat actor 829 Data breach 639 Industry 560 Phishing & fraud 423 Policy & legal 410 Research 117 AI safety & security 114 Tools 111 Advisory 105 AI tools & infra 104

SeverityAll critical 5951 high 5051 medium 3229 low 1001 info 421

Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

Microsoft's September 2026 Patch Tuesday fixes a record 964 CVEs, including two zero-days actively exploited in the wild.

Microsoft patched a record 964 CVEs in its September 2026 Patch Tuesday release, with 101 rated critical and 824 rated important, making it the largest Patch Tuesday to date. The release includes fixes for two zero-days that were exploited in the wild, with CVE-2026-81963 and CVE-2026-85880 highlighted in the release. Affected products span Windows core components, Office, Exchange, .NET, Visual Studio, Active Directory services (including AD CS and AD FS) and numerous Azure services. Tenable notes the release surpasses July's as the biggest ever.

Tenable BlogSep 8, 18:07 UTC · 7d agoVulnerability in the wildCVE-2026-81963 CVE-2026-858801

Inside Win32k Exploitation: Background on Implementations of Win32k and Exploitation Methodologies

Palo Alto Unit 42Jun 5, 13:30 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2022-21882 CVE-2021-1732 CVE-2022-17321

Threat Brief: Microsoft Critical Vulnerabilities (CVE-2022-26809, CVE-2022-26923, CVE-2022

Palo Alto Unit 42Jun 5, 20:13 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-26809 CVE-2022-26923 CVE-2022-269251

Microsoft May 2020 Patch Tuesday fixes 111 flaws, 13 Critical

Security AffairsMay 13, 10:56 UTC · May 13, 2020Vulnerability in the wildCVE-2020-1071 CVE-2020-1135 CVE-2020-1067+65 CVEs

Microsoft September 2026 Patch Tuesday Fixes 973 Vulnerabilities and 2 Exploited Zero-Days

Microsoft's September 2026 Patch Tuesday fixes 973 vulnerabilities, including two zero-days already exploited in the wild.

Microsoft's September 2026 Patch Tuesday addresses 973 vulnerabilities across Windows, Office, and Azure components, including two zero-days already exploited in the wild. CVE-2026-81963, an elevation of privilege flaw in the Windows Update Stack, is flagged as an exploited zero-day. The release includes numerous remote code execution and information disclosure fixes for Microsoft Excel and Word, plus patches for the Windows kernel, ALPC, Print Spooler, ReFS, Entra ID, and Azure CLI.

GBHackersSep 9, 05:02 UTC · 6d agoAdvisory in the wildCVE-2026-85880 CVE-2026-85877 CVE-2026-85875+27 CVEs

Microsoft Patch Tuesday, September 2026 Security Update Review

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, including 113 critical and two actively exploited Windows privilege escalation flaws.

Microsoft's September 2026 Patch Tuesday fixes 974 vulnerabilities, its largest release ever, including 113 critical and 860 important, covering Windows HTTP.sys, Hyper-V, Entra ID, Exchange Server, Office, DNS, and more. Two zero-days are confirmed exploited in the wild: CVE-2026-81963 (Windows Update Stack EoP) and CVE-2026-85880 (ALPC heap overflow), both letting authenticated attackers gain SYSTEM privileges. Notable criticals include an Entra ID authentication bypass (CVE-2026-62916) and multiple Windows DNS Server and Office remote code execution flaws.

Qualys ThreatPROTECTSep 9, 12:23 UTC · 6d agoVulnerability in the wildCVE-2026-81963 CVE-2026-85880 CVE-2026-58599+27 CVEs

Threat Round Up for January 5

Cisco TalosJan 12, 17:31 UTC · Jan 12, 2018Ransomware

Threat Roundup for June 16

Cisco TalosJun 22, 23:05 UTC · Jun 22, 2018Vulnerability

Patch Tuesday for August 2022 fixed actively exploited zero

Security AffairsAug 9, 21:25 UTC · Aug 9, 2022Vulnerability in the wildCVE-2022-34713 CVE-2022-30133 CVE-2022-35744+46 CVEs

The September 2026 Security Update Review

ZDI's September 2026 Microsoft update review lists two already-exploited Windows EoP zero-days and dozens of critical RCEs across Office, SQL Server, and Windows services.

The review catalogs Microsoft's September 2026 fixes, marking CVE-2026-85880 (Windows ALPC) and CVE-2026-81963 (Windows Update Stack) as already exploited elevation-of-privilege issues. It also lists critical RCE flaws in Office, Word, Excel, PowerPoint, Outlook, SQL Server, Windows DNS, DHCP and Failover Cluster, plus graphics component RCEs. Azure-side fixes include Entra ID, Copilot Studio, Azure AI Language and Azure AD B2C elevation-of-privilege flaws.