Trail of Bits has released two agent-based plugins, patching-bugs and regression-hunt, built through its Patch the Planet collaboration with OpenAI. The patching-bugs plugin reproduces reported bugs and develops and tests fixes, while regression-hunt checks whether changes break previously working, supported behavior. The company says a review of over 130 merged Patch the Planet PRs found 21 regressions, none of which broke a security protection.
blog.trailofbits.com
· 2026-10-21
Microsoft's October 13 Patch Tuesday update for Windows 11 introduced a bug that disables the Smart App Control security feature and prevents users from turning it back on through normal settings. Microsoft has acknowledged the issue and published a Registry workaround involving two new keys while it prepares an official fix.
zdnet.com
· 2026-10-20
Microsoft has fixed a bug that caused games and Windows 11 apps using AC-3 (Dolby Digital) audio decoding to crash or fail to launch after installing the September 2026 preview update KB5124010. The fix arrives in the KB5127648 October 2026 Patch Tuesday update, which Microsoft says affected users on Windows 11 24H2 and later should install.
bleepingcomputer.com
· 2026-10-19
A home server is a server. Exposed media and file services get scanned and exploited within days of a disclosure, and the fix is a routine rather than vigilance.
gokawiil.com
· 2026-10-19
Linus Torvalds has posted his first LLM-assisted patch to a Linux kernel development branch, addressing a long-standing cache contention issue that occurs when many CPUs read the same file, such as in shared libraries, databases, or web servers. Torvalds says a synthetic benchmark showed a 23x performance improvement, but cautioned that real-world workloads won't see gains anywhere near that figure.
tomshardware.com
· 2026-10-16
Empirical Security founder Jay Jacobs described how one organization's vulnerability management system collapsed after September's Patch Tuesday, unable to handle the volume despite fewer than 1,000 CVEs spread across tens of millions of vulnerable assets. Industry voices say record-breaking Patch Tuesdays, emergency fixes, and AI-driven vulnerability discovery are pushing security teams toward prioritization frameworks like CISA's Known Exploited Vulnerabilities list and VulnCheck's KEV catalog rather than raw vulnerability scores.
darkreading.com
· 2026-10-15
Microsoft's October 2026 Patch Tuesday update addressed 1,413 security vulnerabilities, the highest monthly total the company has ever released and more than it patched in any entire previous year. Windows accounted for 1,102 of the fixes, with Office, SharePoint Server, SQL Server, and developer tools making up the rest. The release also closed three actively exploited or publicly known zero-day flaws affecting Windows Shell, .NET Framework, and MessagePack-CSharp.
techspot.com
· 2026-10-15
Torvalds posted a ten-patch series that improves folio lookup by marking 'hot' folios for delayed release under an RCU grace period, allowing both the lookup and the actual data access to happen within an RCU-protected region without taking a refcount on the fast path. The change reportedly yields an order-of-magnitude speedup on a read()-heavy benchmark, though reviewers have already found a race condition requiring further fixes.
lwn.net
· 2026-10-14
Microsoft released updates addressing more than 1,400 security vulnerabilities across Windows and other software, far exceeding September's previous record of about 1,000 fixes. One flaw, CVE-2026-96951, a Windows Shell security feature bypass, is already being exploited in the wild, while another, CVE-2026-108398 in the .NET Framework, was publicly disclosed before patching though not yet seen exploited. At least 78 of the fixes are rated critical, mostly allowing remote code execution.
krebsonsecurity.com
· 2026-10-13
Microsoft released its largest-ever Patch Tuesday update in October, addressing a record number of vulnerabilities across its product line. The update includes fixes for security bypasses and unauthenticated remote code execution flaws, some of which are reported as actively exploited zero-days.
darkreading.com
· 2026-10-13
Microsoft released its October 2026 Patch Tuesday update, fixing 1,411 vulnerabilities across its product line, including three zero-day flaws. The bulk of the disclosed issues affect .NET and related components, spanning remote code execution, elevation of privilege, denial of service, and information disclosure bugs rated mostly Important severity.
bleepingcomputer.com
· 2026-10-13
Microsoft has released KB5126657 for Windows 10, available to Enterprise LTSC and ESU-enrolled devices via Windows Update. The update brings systems to build 19045.7807 (19044.7807 for LTSC 2021) and folds in this month's Patch Tuesday fixes, which addressed 1,411 vulnerabilities including one actively exploited zero-day. It also adds permanent Daylight Savings Time support for British Columbia and Alberta, a new Manitoba Standard Time zone, auditing controls for ReFS volumes on external storage, and a Storage Spaces fix.
bleepingcomputer.com
· 2026-10-13
GoKawiil