GoKawiil
Tech News
Bradley Chambers argues that traditional software update cycles, like quarterly patches or annual macOS releases, are becoming obsolete as AI tools help attackers discover vulnerabilities faster. He outlines that IT teams now need a three-part strategy for patch management, starting with retraining end users to accept more frequent, less optional updates.
Microsoft has patched a bug that stopped Teams and the new Outlook for Windows from launching on ARM-based devices like the Surface Pro 11 and Surface Laptop 7. The issue, triggered by August 2026 security updates (KB5121003), mainly hit new or freshly imaged PCs without Microsoft Store updates. The fix arrived with the September 8 cumulative update, KB5124012.
Windows admins report that this month's cumulative updates for Windows Server 2019, 2022, and 2025 are breaking Remote Desktop Services, with servers working fine for a few hours before connections begin to fail. Existing sessions can get stuck unable to disconnect, new logins hang and time out, and in many cases only a hard reset restores service. Some administrators say uninstalling the September patch is the only reliable fix so far.
Security researcher Nightmare-Eclipse has published a new proof-of-concept exploit called ShieldCrash on GitHub, claiming it circumvents Microsoft's fix for CVE-2026-69414 (ShieldBreak), a privilege escalation bug in the Malware Protection Engine. The exploit reportedly allows arbitrary file reads as SYSTEM on all supported Windows versions, despite Microsoft's September patch. Microsoft has not yet responded to requests for comment on the claim.
Users of multiple Excel versions, from Office 2016 through 2024 including LTSC 2021, report that this week's KB5002914 security update, part of Microsoft's September 2026 Patch Tuesday, disables copy-paste and formula-dragging functions. Complaints surfaced on Reddit and Microsoft's Q&A forums, with some teams reporting workflow disruptions after widespread installation of the patch. BleepingComputer could not reproduce the bug on a tested Excel 2019 build, suggesting the issue may not affect all configurations equally.
Microsoft has resolved a bug that made desktop wallpapers turn solid black and reset mouse settings on Windows 11 24H2 and 25H2 devices. The issue stemmed from the KB5120998 preview update released in August 2026, and Microsoft says installing the KB5124008 update from September 8 fixes it.
Microsoft's latest Patch Tuesday update addresses 966 vulnerabilities, the largest batch it has ever released in a single month, including 105 critical-rated bugs. Two of the flaws are zero-days already being actively exploited by attackers. This follows 570 fixes in August and 400 the month before, showing a sharp month-over-month escalation.
A researcher using the alias Nightmare Eclipse publicly released details of a new zero-day exploit dubbed 'ShieldCrash' targeting Microsoft Defender, timed to appear right after Microsoft's September 2026 Patch Tuesday updates. The exploit reportedly allows attackers to gain SYSTEM-level access on affected Windows machines, the highest level of privilege on the system.
Google released security updates fixing 230 vulnerabilities, including a Chrome zero-day flaw that attackers are already exploiting in the wild. This marks the seventh Chrome zero-day patched by Google since the beginning of the year.
Microsoft released patches for 974 vulnerabilities across Windows and other products, its largest single update batch ever, surpassing July's record of 570 fixes. The release includes two actively exploited zero-day flaws that let attackers escalate privileges, plus 113 critical-rated bugs including a dangerous DNS weakness and a Windows Shell remote code execution flaw scoring 9.8 out of 10 in severity.
Microsoft's September security update addressed 974 unique CVEs, the largest Patch Tuesday release yet, including two zero-day flaws already being actively exploited. Windows accounted for the vast majority of fixes at 723, with Office, SQL, SharePoint and Azure making up the rest, while 13 issues were rated Critical.
Microsoft released its September security update addressing roughly 972 vulnerabilities, including 112 rated critical, surpassing the previous record of 570 set just two months ago. The company has now fixed 2,760 vulnerabilities in 2024 alone, more than double last year's total and on pace to exceed the combined totals of the past three years.