Reported by 31 outlets

Timeline

1. original reporting

   Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild. # PatchTue

   securityonline.info · 35d ago · September 8th, 2026

   Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild. # PatchTue

   via Mastodon https://securityonline.info/patch-tuesday-zero-day-september-2026/?utm_source=mastodon&utm_medium=jetpack_social

2. original reporting

   September 2026 Microsoft Patch Tuesday, (Tue, Sep 8th)

   malware.news · 35d ago · September 8th, 2026

   This month, Microsoft released patches for a record-breaking 973 vulnerabilities, including 113 rated critical. It is by far the largest Patch Tuesday to date, well ahead of the previous high of 664 set in July 2026. Two vulnerabilities are listed as exploited in the wild, while none were publicly disclosed before Patch Tuesday. Notable fixes include Windows privilege escalation and critical RCEs in Skype for Business, MSMQ and RRAS. Article Link: Are you human? - SANS Internet Storm Center

3. update from bleepingcomputer.com

   Microsoft Record Patch Tuesday: 206 Vulnerabilities Fixed, Including 3 Zero-Days (GreenPlasma, YellowKey, HTTP/2 Bomb)

   bleepingcomputer.com · 126d ago · June 10th, 2026

   Microsoft shipped its largest Patch Tuesday on record — 206 vulnerabilities across Windows, Office, Exchange, Azure, and .NET. 33 are rated Critical, 28 of which are remote code execution flaws. Three publicly disclosed zero-days patched (none actively exploited):

   • CVE-2026-45586 (GreenPlasma) — Windows CTFMON EoP via improper link resolution. Grants SYSTEM privileges. Disclosed by Nightmare Eclipse. - CVE-2026-50507 (YellowKey) — Windows BitLocker security feature bypass via WinRE and USB/EFI boot. Physical access required. Also disclosed by Nightmare Eclipse. - CVE-2026-49160 (HTTP/2 Bomb) — HTTP.sys DoS via HTTP/2 header compression abuse. Single home computer can crash web servers in ~20 seconds. New MaxHeadersCount registry setting introduced as mitigation. Critical CVEs to prioritize: Multiple Remote Desktop Client RCEs (CVE-2026-42985, CVE-2026-47289, CVE-2026-47654, CVE-2026-42992, CVE-2026-44801, CVE-2026-44799, CVE-2026-48563 — all Critical), Windows Hyper-V RCE (CVE-2026-45641, CVE-2026-47652, CVE-2026-45607), Windows DHCP Client RCE via stack buffer overflow (CVE-2026-44815, Critical), Windows Graphics Component RCE (CVE-2026-44812, CVE-2026-44803, both Critical), Microsoft Cryptographic Services EoP (CVE-2026-44810, Critical), and Azure Kubernetes Service RCE (CVE-2026-32193, Critical). The volume of critical RCE bugs in Remote Desktop Client alone — 7 CVEs — signals a significant code quality finding. The 206-figure is a record that reflects an alarming trend: vulnerability volumes are structurally increasing. June 2026 now holds the record, surpassing May 2026's 190 CVEs. Active Directory Domain Services (CVE-2026-45648), Kerberos KDC (CVE-2026-47288), and Windows Kernel (CVE-2026-45657) also received critical RCE fixes.

4. update from msrc.microsoft.com

   We been a bit busy. 974 Microsoft CVEs published this morning. https:// msrc.microsoft.com/update-guide/r eleaseNote/2026-Sep …

   msrc.microsoft.com · 35d ago · September 8th, 2026

   We been a bit busy. 974 Microsoft CVEs published this morning. https:// msrc.microsoft.com/update-guide/r eleaseNote/2026-Sep …

   via X https://msrc.microsoft.com/update-guide/releaseNote/2026-Sep

5. update from www.theverge.com

   Microsoft breaks another patch Tuesday record Engineers at Microsoft typically enjoy a quieter summer to take vacations and spend time with

   www.theverge.com · 35d ago · September 8th, 2026

   Microsoft breaks another patch Tuesday record Engineers at Microsoft typically enjoy a quieter summer to take vacations and spend time with

   via Mastodon https://www.theverge.com/tech/991178/microsoft-patch-tuesday-record-breaking-ai-notepad

6. update from www.microsoft.com

   The September 2026 security updates are available. In addition, starting today, Microsoft is publishing Vulnerability Exploitability eXchang

   www.microsoft.com · 35d ago · September 8th, 2026

   In addition, starting today, Microsoft is publishing Vulnerability Exploitability eXchang

   via X https://www.microsoft.com/en-us/msrc/blog/2026/09/toward-greater-transparency-expanding-machine-readable-vulnerability-exploitable-exchange

7. update from bleepingcomputer.com

   Windows 11 cumulative updates KB5124008 & KB5122880 released

   bleepingcomputer.com · 35d ago · September 8th, 2026

   Microsoft has released Windows 11 KB5124008 and KB5122880 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. Today's updates are mandatory as they contain the September 2026 Patch Tuesday security patches for 1,000 vulnerabilities discovered in previous months. You can install today's update by going to Start > Settings > Windows Update and clicking on 'Check for Updates .' You can also manually download and install the update from the Microsoft Update Catalog . This is the ninth 'Patch Tuesday' release in 2026, and it's based on 24H2, which means 25H2 gets the same update. There are no exclusive or special changes. What's new in the September 2026 Patch Tuesday update With today's update, Microsoft added a movable taskbar, Windows Search without Bing, and more. Here's the full list of improvements and fixes: Taskbar This update gives you more ways to customize the taskbar to match how you work and make better use of screen space. You can now choose whether the taskbar appears at the bottom, top, left, or right side of your screen. In these other positions, tooltips, flyouts, and animations will still come from the taskbar, and most customization settings, such as never combining taskbar icons, will work with all locations. Search box and smaller taskbar are currently supported only for top and bottom positions. To change the position of the taskb

8. mentioned by www.bleepingcomputer.com

   Windows 11 cumulative updates KB5124008 & KB5122880 released https:// bleepingcomputer.com/news/microsoft /windows-11-cumulative-updates-kb5

   www.bleepingcomputer.com · 35d ago · September 8th, 2026

9. update from tenable.com

   Microsoft’s September 2026 Patch Tuesday addresses 964 CVEs (CVE-2026-81963, CVE-2026-85880)

   tenable.com · 35d ago · September 8th, 2026

   104Critical 860Important 0Moderate 0Low Microsoft addresses 964 CVEs, smashing July’s release as the largest Patch Tuesday release. This month’s update includes patches for: .NET .NET and Visual Studio ASP.NET Core Active Directory Certificate Services (AD CS) Active Directory Domain Services Active Directory Federation Services (AD FS) Audio Video Control Transport Protocol Azure Arc Azure CycleCloud Azure HDInsights BranchCache Connected Devices Platform Service (Cdpsvc) Data Sharing Service Client GitHub Copilot and Visual Studio Code Graphic Fonts HID class driver IP Helper Internet Storage Name Service Kernel Streaming WOW Thunk Service Driver Microsoft Account Microsoft Authenticator Microsoft Azure Attestation service and Device Health Attestation Service Microsoft Azure CLI Microsoft COM for Windows Microsoft Dynamics 365 Microsoft Exchange Server Microsoft Graphics Component Microsoft Install Service Microsoft JScript Microsoft Local Security Authority Server (lsasrv) Microsoft Office Microsoft Office Access Microsoft Office Excel Microsoft Office Outlook Microsoft Office PowerPoint Microsoft Office Publisher Microsoft Office SharePoint Microsoft Office Word Microsoft Standard XPS Microsoft Teams for Android Microsoft Trace Data Helper Microsoft UxTh

10. update from bleepingcomputer.com

    Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days

    bleepingcomputer.com · 35d ago · September 8th, 2026

    The approximate number of bugs in each vulnerability category is listed below: 438 Elevation of Privilege Vulnerabilities 19 Security Feature Bypass Vulnerabilities 258 Remote Code Execution Vulnerabilities 173 Information Disclosure Vulnerabilities 56 Denial of Service Vulnerabilities 16 Spoofing Vulnerabilities When BleepingComputer reports on Patch Tuesday security updates, we only count vulnerabilities released by Microsoft on Patch Tuesday itself. Therefore, today's total does not include 204 flaws fixed earlier this month, including vulnerabilities in Azure AI Language, Azure Cosmos DB, Copilot Studio, Entra ID, Mariner, Microsoft Azure Active Directory B2C, Microsoft Discovery Studio, Microsoft Edge (Chromium-based), Microsoft Fabric, and Power Automate. This Patch Tuesday is Microsoft's largest security update ever, marking a significant increase over other recent massive releases, including the 570 security flaws fixed in July and 400 fixed in August . The increase in Patch Tuesday security updates comes after Microsoft began using an AI-powered vulnerability discovery system to identify more security flaws

11. update from bleepingcomputer.com

    Microsoft releases Windows 10 KB5122878 extended security update

    bleepingcomputer.com · 35d ago · September 8th, 2026

    If you are running Windows 10 Enterprise LTSC or are enrolled in the ESU program , you can install this update like normal by going into Settings, clicking on Windows Update, and manually performing a 'Check for Updates.' Windows 10 KB5122878 update Source: BleepingComputer After installing this update, Windows 10 will be updated to build 19045.7725, and Windows 10 Enterprise LTSC 2021 will be updated to build 19044.7725. The complete list of fixes in KB5122878 is listed below: [Secure Boot] This update includes additional high confidence device targeting data, increasing coverage of devices eligible to automatically receive new Secure Boot certificates . Certificate deployment via Windows updates continues across supported PCs and non-managed business devices in the coming months. [Date and Time] This update adjusts Morocco Standard Time to reflect Morocco's transition to permanent UTC+00:00 effective Sep

12. update from blog.qualys.com

    Microsoft and Adobe Patch Tuesday, September 2026 Security Update Review

    blog.qualys.com · 35d ago · September 8th, 2026

    Microsoft kicks off September with its monthly Patch Tuesday release, delivering fixes for security vulnerabilities affecting its products. The security updates are packed with security fixes, providing organizations with important updates to help protect their environments from emerging threats. This month’s release includes fixes for several high-severity issues that could potentially enable remote code execution, privilege escalation, or denial-of-service attacks. As always, timely patch deployment is crucial to reduce exposure and ensure systems remain resilient against exploitation attempts.

13. update from malware.news

    Microsoft security advisory – September 2026 monthly rollup (AV26-896) – Update 1

    malware.news · 35d ago · September 8th, 2026

    Serial Number: AV26-896 Date: September 8, 2026 As of September 8, 2026, Microsoft is affected by vulnerabilities in the following products: .NET 10.0 installed on Linux .NET 10.0 installed on Mac OS .NET 10.0 installed on Windows .NET 11.0 installed on Linux .NET 11.0 installed on Mac OS .NET 11.0 installed on Windows .NET 8.0 installed on Linux .NET 8.0 installed on Mac OS .NET 8.0 installed on Windows .NET 9.0 installed on Linux .NET 9.0 installed on Mac OS .NET 9.0 installed on Windows ASP.NET Core 10.0 ASP.NET Core 11.0 ASP.NET Core 8.0 ASP.NET Core 9.0 Azure AI Language Authoring Azure Arc SQL Server Extension Azure Cosmos DB Azure CycleCloud Azure HDInsight HEIF Image Extension HEVC Video Extensions HEVC Video Extensions for Licensed Applications HEVC Video Extensions from Device Manufacturer Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 3.5 AND 4.7.2 Microsoft .NET Framework 3.5 AND 4.8 Microsoft .NET Framework 3.5 AND 4.8.1 Microsoft .NET Framework 4.6.2/4.7/4.7.1/4.7.2 Microsoft .NET Framework 4.8 Microsoft .NET Framework 4.8.1 Microsoft 365 Apps for Enterprise Microsoft Access 2016 Microsoft Authentication Library (MSAL) Microsoft Authenticator for Android M

14. update from rapid7.com

    Patch Tuesday - September 2026

    rapid7.com · 35d ago · September 8th, 2026

    As Rapid7 noted last month, there is no reason to suppose that Patch Tuesday will ever return to the lower volumes we saw prior to 2026. Windows ALPC: zero-day EoP The eternal game of elevation of privilege whack-a-mole between Microsoft and attackers continues. This month, the battle is centered on the Windows Advanced Local Procedure Call (ALPC) mechanism, a kernel capability that facilitates inter-process communication. Microsoft is aware of exploitation in the wild already. Successful abuse of the flaw underlying CVE-2026-85880 grants an attacker SYSTEM via a buffer overflow that enables an out-of-bounds write, and as we all know by now, this is exactly what would happen during the first five minutes of a technically accurate horror movie about ransomware. We can infer one silver lining here: since neither Server 2025 nor Windows 11 receives patches for CVE-2026-85880, it is likely that Microsoft’s ongoing efforts to level up memory safety by rewriting critical kernel c

15. update from krebsonsecurity.com

    Microsoft Plugs Nearly 1,000 Security Holes

    krebsonsecurity.com · 35d ago · September 8th, 2026

    Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month. Image: Shutterstock.com, Kirill Makarov. September’s Patch Tuesday brings this year’s total to more than 2,600, more than twice Microsoft’s previous record-setting patch year in 2020 (1,245) and with three more months to go. Fully 113 of the bugs addressed today earned Microsoft’s “critical” rating, meaning they could be abused by malware or miscreants to seize control over a vulnerable Windows machine with little or no help from the user. Among the more serious critical flaws this month is CVE-2026-69730 , a DNS weakness present in Windows Server 2012 onward and on Windows 10. Microsoft warns that an unauthenticated attacker could leverage this weakness simply by sending a specially crafted packet to an affecte

16. mentioned by malware.news

    Microsoft Plugs Nearly 1,000 Security Holes

    malware.news · 35d ago · September 8th, 2026

17. update from krebsonsecurity.com

    Microsoft Plugs Nearly 1,000 Security Holes https:// krebsonsecurity.com/2026/09/mi crosoft-plugs-nearly-1000-security-holes/ # MicrosoftPat

    krebsonsecurity.com · 35d ago · September 8th, 2026

    Microsoft Plugs Nearly 1,000 Security Holes https:// krebsonsecurity.com/2026/09/mi crosoft-plugs-nearly-1000-security-holes/ # MicrosoftPat

    via Mastodon https://krebsonsecurity.com/2026/09/microsoft-plugs-nearly-1000-security-holes/

18. mentioned by zubiqo.com

    Microsoft issued 974 security updates in a single batch and pushed its 2026 patch total past 2,600. AI helps researchers find vulnerabilitie

    zubiqo.com · 35d ago · September 8th, 2026

19. update from krebsonsecurity.com

    Christ Almighty am I going to need to push the teams to patch their shit this month. https:// krebsonsecurity.com/2026/09/mi crosoft-plugs-n

    krebsonsecurity.com · 35d ago · September 8th, 2026

    Christ Almighty am I going to need to push the teams to patch their shit this month.

20. update from cyberscoop.com

    Microsoft discloses two actively exploited zero-days among 974 vulnerabilities

    cyberscoop.com · 35d ago · September 8th, 2026

    Yet, the recent period of record breaking vulnerability disclosures hasn’t resulted in a flood of actively exploited zero-days. “AI-assisted vulnerability discovery shows no signs of slowing down,” Dustin Childs, head of threat awareness at Trend Micro’s Zero Day Initiative, wrote in a blog post Tuesday. “However, we have not seen a correlating spike in active exploits — yet.” The vulnerabilities actively exploited prior to disclosure — CVE-2026-81963 affecting the Windows Update Stack and CVE-2026-85880 affecting Windows Advanced Local Procedure Call — both have CVSS ratings of 7.8 and allow attackers to escalate privileges. The update included 723 vulnerabilities in Windows, 111 in Office, 111 in Office 2016, 62 in SQL and 22 spanning various developer tools. Researchers encouraged security teams and customers to not get overwhelmed by the total number of defects, but instead focus on their specific areas of risk and exposure.

21. mentioned by www.bleepingcomputer.com

    🤖 Microsoft Sept 2026 Patch Tuesday: record 966 CVEs patched, incl. 2 zero-days actively exploited in the wild + 58 flaws flagged as likely

    www.bleepingcomputer.com · 35d ago · September 9th, 2026

22. update from geekyonai.com

    Microsoft releases September patch for 972 bugs amid Bing ads rollout Microsoft has released its September security patch cycle, a... # Micr

    geekyonai.com · 35d ago · September 9th, 2026

    Microsoft releases September patch for 972 bugs amid Bing ads rollout Microsoft has released its September security patch cycle, a...

23. mentioned by malware.news

    Security Alert: Microsoft Releases September 2026 Security Updates

    malware.news · 35d ago · September 9th, 2026

24. update from www.jpcert.or.jp

    New Security Alert Regarding Microsoft Releases September 2026 Security Updates ^TN https:// jpcert.or.jp/english/at/202 6/at260025.html …

    www.jpcert.or.jp · 35d ago · September 9th, 2026

    New Security Alert Regarding Microsoft Releases September 2026 Security Updates ^TN https:// jpcert.or.jp/english/at/202 6/at260025.html …

    via X https://www.jpcert.or.jp/english/at/2026/at260025.html

25. mentioned by malware.news

    September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

    malware.news · 35d ago · September 9th, 2026

26. update from gbhackers.com

    Microsoft September 2026 Patch Tuesday Fixes 973 Vulnerabilities and 2 Exploited Zero-Days

    gbhackers.com · 35d ago · September 9th, 2026

    Given the scale of this update, enterprise security teams must triage vulnerabilities quickly, especially for internet-facing Windows systems, privileged […] The post Microsoft September 2026 Patch Tuesday Fixes 973 Vulnerabilities and 2 Exploited Zero-Days appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

27. update from cyberpress.org

    Microsoft Patch Tuesday Fixes Record 973 Vulnerabilities Including 2 Exploited Zero-Days

    cyberpress.org · 34d ago · September 9th, 2026

    Although neither issue permits remote compromise on its own, a successful local attack could give an authenticated attacker SYSTEM privileges, the highest level of access on a Windows device. Microsoft said an authorized attacker could exploit the flaw locally to elevate privileges. This can turn a limited foothold, such as access gained through malware or a compromised account, into full control of the affected system. The vulnerable components handle Windows Update installation. An attacker with loc

28. mentioned by msrc.microsoft.com

    Microsoft shipped its largest patch release on record yesterday. The September document lists 1,185 CVEs, counting the third-party fixes it

    msrc.microsoft.com · 34d ago · September 9th, 2026

29. mentioned by beyondmachines.net

    Microsoft Patches 966 Vulnerabilities in September 2026 Update Including Two Actively Exploited Zero-Days Microsoft's September 2026 Patch T

    beyondmachines.net · 34d ago · September 9th, 2026

30. update from malware.news

    Microsoft fixes record 964 flaws, including 2 exploited zero-days

    malware.news · 34d ago · September 9th, 2026

    However, 10 of those affect cloud services or involve fixes that Microsoft applies itself, leaving 964 vulnerabilities that customers need to patch. Neither provides remote access by itself, but SYSTEM-level access is valuable to malware operators after they gain an initial foothold through phishing, stolen credentials, or another method. Here’s how to make sure you’re up to date: Click the Start button, then open Settings . Select Windows Update (usually at the bottom of the menu on the left). If you’ve enabled Get the latest updates as soon as

31. update from arstechnica.com

    Why this month's Microsoft patch release is a doozy Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted at

    arstechnica.com · 34d ago · September 9th, 2026

    Why this month's Microsoft patch release is a doozy Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted at

    via Mastodon https://arstechnica.com/security/2026/09/microsoft-patches-a-record-972-vulnerabilities-112-of-them-critical/

32. mentioned by rbfirehose.com

    Ars Technica: Why this month’s Microsoft patch release is a doozy. “Microsoft’s patch for September is a doozy, with a record number of roug

    rbfirehose.com · 34d ago · September 9th, 2026

33. update from securityaffairs.com

    Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

    securityaffairs.com · 34d ago · September 9th, 2026

    submitted by /u/sunychoudhary [link] [comments]

    via reddit r/cybersecurity: Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs

34. update from www.theregister.com

    Microsoft breaks Patch Tuesday record with 974-CVE deluge Adobe also brought goodies to the patch party and they deserve immediate attention

    www.theregister.com · 34d ago · September 9th, 2026

    Microsoft breaks Patch Tuesday record with 974-CVE deluge Adobe also brought goodies to the patch party and they deserve immediate attention

    via Mastodon https://www.theregister.com/security/2026/09/09/microsoft-breaks-patch-tuesday-record-with-974-cve-deluge/5295160

35. mentioned by www.urbanmind.net

    Microsoft's September 2026 security update addresses 1186 vulnerabilities: 119 rated Critical, 913... # cybersecurity # infosec # microsoft

    www.urbanmind.net · 34d ago · September 9th, 2026

36. update from socprime.com

    CVE-2026-85880 and CVE-2026-81963: Microsoft Patches Two Actively Exploited Windows Zero-Days

    socprime.com · 34d ago · September 9th, 2026

    Despite targeting different Windows generations and components, both vulnerabilities require low privileges, have low attack complexity, require no user interaction, and have been confirmed as exploited before patches became available. CISA added both flaws to its Known Exploited Vulnerabilities (KEV) catalog on September 8, 2026, setting September 22 as the remediation deadline for US federal civilian agencies. Security teams looking for CVE-2026-85880 detection content can explore SOC Prime’s Detection Intelligence to identify behavioral patterns potentially associated with privilege escalation and post-exploitation activity. Click Explore Detections to access detection rules and hunting queries mapped to MITRE ATT&CK® and compatible with multiple SIEM, EDR, and Data Lake technologies. Defenders can also Detect CVE-2026-81963 exploitation and related post-compromise behavior by focusing on suspicious privilege elevation, system-level file modifications, an

37. mentioned by meterpreter.org

    The September 2026 Patch Tuesday is Microsoft's largest ever, fixing 966 flaws including two actively exploited Windows zero-days. Here is w

    meterpreter.org · 33d ago · September 10th, 2026

38. update from bleepingcomputer.com

    Microsoft fixes bug that wiped Windows desktop settings

    bleepingcomputer.com · 33d ago · September 10th, 2026

    The company confirmed last week, after a wave of user reports that their wallpaper switched to a black background automatically, that this bug is triggered after installing the KB5120998 August 2026 preview update on Windows 11 24H2 and Windows 11 25H2 systems. "Following installation of Windows updates released August 27 2026 (KB5120998) and later, some Windows Desktop settings fail to load, resulting in desktop backgrounds displaying as a solid black color," Microsoft said in a Windows release health update. This is because the issue prevents the correct loading of settings, regardless of their value. In this case, a default black background is used instead." The KB5120998 preview update causing this issue also changes or resets mouse settings , making it impossible to restore the previous settings after they are reverted. "This issue was resolved by Windows updates released Sept

39. mentioned by dev.to

    1. Basic Information Article Title: Microsoft September 2026 Patch Tuesday fixes 966... # security # threatintel # software # coding # devel

    dev.to · 33d ago · September 10th, 2026

40. mentioned by insomnisec.com

    Microsoft's Record-Breaking September 2026 Patch Tuesday: What You Actually Need to Know Every second Tuesday of the month, Microsoft releas

    insomnisec.com · 33d ago · September 10th, 2026

41. mentioned by www.techfinitive.com

    Microsoft’s latest Patch Tuesday hit a staggering 973 vulnerabilities, including 119 critical bugs. As workloads surge, CISOs must confront

    www.techfinitive.com · 32d ago · September 11th, 2026

42. update from diesec.com

    974 CVEs. Two zero-days in the wild. One release. TerminalFix hit Berlin's Senate before awareness training caught up. 4 espionage clusters

    diesec.com · 32d ago · September 11th, 2026

    TerminalFix hit Berlin's Senate before awareness training caught up. 4 espionage clusters

    via Mastodon https://diesec.com/2026/09/top-5-cybersecurity-news-stories-september-11-2026/

43. update from schneier.com

    Microsoft’s Patching

    schneier.com · 29d ago · September 14th, 2026

    Once a month, Microsoft pushes a security update to all Windows users. Two weeks ago, OpenAI, Anthropic, Amazon Web Services, Google, Microsoft, and 100 companies and organizations published an open letter warning of a narrowing window for patching vulnerabilities ahead of an expected tsunami of AI-enabled attacks that actively exploit them first. The industry is taking the threat seriously by pumping out unprecedented numbers of patches in their software. What will be interesting to watch is how the number of vulnerabilities changes over the next few months. And Microsoft is right: The window to patch has shrunk to “immediately.” AIs are also good a

44. mentioned by www.schneier.com

    🤖 Microsoft's September 2026 Patch Tuesday fixes a record ~972 vulnerabilities, 112 rated critical — vs 570 in July. Vulnerability disclosur

    www.schneier.com · 29d ago · September 14th, 2026

45. mentioned by cybersecurefox.com

    CVE-2026-81963: 0‑day in Windows Update Stack is actively exploited 🔗 https:// cybersecurefox.com/en/cve-2026 -81963-windows-update-stack-pr

    cybersecurefox.com · 26d ago · September 17th, 2026