GoKawiil
Tech News
A root-user broadcast posted early Saturday morning recounts a brutal week of patching: a routine Monday fix, Patch Tuesday, an 'Exploit Wednesday' after someone reverse-engineered the patch diff, and an out-of-band fix on Thursday. The message, styled as a mock CVE advisory, asks the security community to pause filing vulnerabilities, reserving CVE numbers, or publishing proof-of-concept exploits for just 24 hours.
Microsoft told IT admins it wrongly marked an Always On VPN connection bug as resolved in October 2026 Windows 11 cumulative updates, reverting the status to 'Mitigated.' The bug, first acknowledged in September, can leave VPN connections stuck or failing with a 'port already in use' error on Windows 11 24H2 systems using automatic protocol selection.
Microsoft's October 13 Patch Tuesday update for Windows 11 introduced a bug that disables the Smart App Control security feature and prevents users from turning it back on through normal settings. Microsoft has acknowledged the issue and published a Registry workaround involving two new keys while it prepares an official fix.
Microsoft has fixed a bug that caused games and Windows 11 apps using AC-3 (Dolby Digital) audio decoding to crash or fail to launch after installing the September 2026 preview update KB5124010. The fix arrives in the KB5127648 October 2026 Patch Tuesday update, which Microsoft says affected users on Windows 11 24H2 and later should install.
Empirical Security founder Jay Jacobs described how one organization's vulnerability management system collapsed after September's Patch Tuesday, unable to handle the volume despite fewer than 1,000 CVEs spread across tens of millions of vulnerable assets. Industry voices say record-breaking Patch Tuesdays, emergency fixes, and AI-driven vulnerability discovery are pushing security teams toward prioritization frameworks like CISA's Known Exploited Vulnerabilities list and VulnCheck's KEV catalog rather than raw vulnerability scores.
Microsoft's October 2026 Patch Tuesday update addressed 1,413 security vulnerabilities, the highest monthly total the company has ever released and more than it patched in any entire previous year. Windows accounted for 1,102 of the fixes, with Office, SharePoint Server, SQL Server, and developer tools making up the rest. The release also closed three actively exploited or publicly known zero-day flaws affecting Windows Shell, .NET Framework, and MessagePack-CSharp.
Microsoft released updates addressing more than 1,400 security vulnerabilities across Windows and other software, far exceeding September's previous record of about 1,000 fixes. One flaw, CVE-2026-96951, a Windows Shell security feature bypass, is already being exploited in the wild, while another, CVE-2026-108398 in the .NET Framework, was publicly disclosed before patching though not yet seen exploited. At least 78 of the fixes are rated critical, mostly allowing remote code execution.
Microsoft released its largest-ever Patch Tuesday update in October, addressing a record number of vulnerabilities across its product line. The update includes fixes for security bypasses and unauthenticated remote code execution flaws, some of which are reported as actively exploited zero-days.
Microsoft released its October 2026 Patch Tuesday update, fixing 1,411 vulnerabilities across its product line, including three zero-day flaws. The bulk of the disclosed issues affect .NET and related components, spanning remote code execution, elevation of privilege, denial of service, and information disclosure bugs rated mostly Important severity.
Microsoft has released KB5126657 for Windows 10, available to Enterprise LTSC and ESU-enrolled devices via Windows Update. The update brings systems to build 19045.7807 (19044.7807 for LTSC 2021) and folds in this month's Patch Tuesday fixes, which addressed 1,411 vulnerabilities including one actively exploited zero-day. It also adds permanent Daylight Savings Time support for British Columbia and Alberta, a new Manitoba Standard Time zone, auditing controls for ReFS volumes on external storage, and a Storage Spaces fix.
Microsoft released two cumulative updates covering Windows 11 versions 23H2 through 26H2, bundling this month's Patch Tuesday security fixes with new features. The updates add File Explorer improvements, including better handling of previews for downloaded files and persistent folder states, plus support for Emoji 17.0. Users can install via Windows Update or download manually from the Microsoft Update Catalog.
Microsoft confirmed that its September 8 Patch Tuesday update broke File History backups on Windows 11 (23H2 through 26H1) and Windows 10 ESU devices, causing errors like false 'reconnect drive' prompts and missing previous file versions. The company has released an optional preview update to fix the issue, though it currently does not apply to Windows 11 23H2 or Windows 10.