149 casos · pág. 1/8
The Windows 11 Patch Tuesday update released on October 13 contains a bug that turns off Smart App Control, a feature introduced in 2022 that blocks potentially malicious or suspicious apps and files. Affected systems show the feature as Off with the On option grayed out, so users cannot re-enable it. Microsoft says it is working on a fix…
An actor using the handle WolfBlxck posted an updated recruitment announcement for Beelzebub ransomware. The actor claims the malware was rewritten from scratch with a stronger focus on disabling endpoint defenses, suppressing telemetry and hindering incident response. The post seeks three more members: a developer, a penetration tester a…
Microsoft's October 2026 Patch Tuesday is described as the largest security update the vendor has ever released. According to Dark Reading, it includes zero-day vulnerabilities, among them defense bypass flaws and unauthenticated remote code execution (RCE) bugs. The article excerpt gives no CVE identifiers, affected product lists, exploi…
The October 2026 Windows security update changes the default handling of NTLMv1-derived credentials for Single Sign-On. Before the update, Windows allowed them and logged warning events. Now they are blocked. Wi-Fi, Ethernet and VPN authentication may fail in environments that still depend on the legacy protocol. Microsoft states this is …
Microsoft awarded researcher Sam Chen (Samchen) US$4,000 for reporting CVE-2026-81376, a critical (CVSS 3.1 score 9.6) Workspace Trust security feature bypass in Visual Studio Code versions before 1.136.2. A specially prepared workspace could connect to an attacker-controlled service and bypass Restricted Mode, potentially exposing local …
Microsoft has fixed a known issue in the classic Outlook desktop client for Windows that hid the Copilot Chat and Copilot buttons for users with a Copilot Chat (Basic) or Microsoft 365 Copilot (Premium) license. Microsoft first announced a fix in June through a service change, but the bug resurfaced after recent updates and was investigat…
Microsoft has confirmed that the October 2026 Windows Server security updates cause Outlook on the web (OWA) sign-in failures and mail delivery problems on some on-premises Exchange Server systems. Affected hosts run Windows Server 2019 and later. Messages sent from Outlook may stay in the Outbox, and Exchange may have trouble accessing m…
Microsoft has fixed a known issue in which games and Windows 11 apps using AC-3 (Dolby Digital) audio decoding crashed after the September 2026 optional preview update KB5124010. The fix is included in the October 2026 Patch Tuesday update KB5127648, which Microsoft advises installing on affected systems running Windows 11 24H2 and later.…
CERT-FR advisory CERTFR-2026-AVI-1332, published 16 October 2026, reports multiple vulnerabilities in Microsoft products that may allow remote arbitrary code execution, privilege escalation, remote denial of service and breach of data confidentiality. The advisory is based on Microsoft security bulletins dated 15 October 2026 for four CVE…
CERT-FR advisory CERTFR-2026-AVI-1323, published 15 October 2026, reports a vulnerability in Microsoft SharePoint Server Subscription Edition that allows an attacker to elevate privileges. The flaw is tracked as CVE-2026-88164 and is based on a Microsoft security bulletin dated 13 October 2026. The advisory does not state whether the flaw…
CERT-FR advisory CERTFR-2026-AVI-1313 reports multiple vulnerabilities in Microsoft .NET, ASP.NET Core and .NET Framework, covered by Microsoft's October 13, 2026 security bulletins for 43 CVEs. Some of them allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. The advisory also l…
CERT-FR advisory CERTFR-2026-AVI-1316 reports multiple vulnerabilities across Microsoft products, based on Microsoft security bulletins dated 13 October 2026. According to the advisory, some flaws allow an attacker to achieve remote arbitrary code execution, privilege escalation and remote denial of service. Other listed impacts are data …
CERT-FR advisory CERTFR-2026-AVI-1314 reports multiple vulnerabilities in Microsoft Windows and related components, covered by Microsoft's October 13, 2026 security bulletins (ADV260001 and dozens of CVEs). Some of them allow remote arbitrary code execution, privilege escalation, remote denial of service, security policy bypass and compro…
CERT-FR advisory CERTFR-2026-AVI-1315 reports multiple vulnerabilities in Microsoft Azure components, published on 14 October 2026. Some of them allow remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft published the corresponding security bulletins on 13 October 2026. …
CERT-FR advisory CERTFR-2026-AVI-1312 covers a large set of vulnerabilities in Microsoft Office, fixed in Microsoft's 13 October 2026 security updates. Exploitation can lead to remote arbitrary code execution, privilege escalation, security policy bypass and loss of data confidentiality. Microsoft states that CVE-2026-96951 is being activ…
Microsoft, working with industry partners and Japanese police, disrupted a Chinese-language phishing-as-a-service (PhaaS) ecosystem centered on Yam Store, an underground marketplace tracked as Storm-3119. The phishing kits sold there were responsible for over a billion phishing emails and texts sent to more than 75,000 organizations since…
Huntress announced the Identity Posture Assessment, an on-demand report in Huntress Managed ISPM that scores a Microsoft 365 tenant against the Huntress Identity Security Framework. This is a product announcement, not a security incident. Huntress cites its own data: 79% of critical and high-severity SOC incident reports last year were ti…
Huntress announced general availability of the Managed ITDR Lookback feature. It reviews up to 180 days of Microsoft 365 login history for newly onboarded tenants, looking for compromises that predate monitoring. Active compromises trigger a critical Incident Report, SOC investigation and session revocation. Previously remediated ones are…
Microsoft announced that quick machine recovery (QMR) is now available on Windows Server 2025 after installing the October 2026 security update. The feature lets IT administrators fix critical boot failures through targeted Windows Update remediations, without physical access to affected systems. QMR was introduced in November 2024 under …
Microsoft Threat Intelligence reports active exploitation of CVE-2026-73570, a command injection flaw in Zimbra Collaboration Suite that allows unauthenticated, zero-click compromise of internet-facing email servers. Attackers deployed webshells, escalated privileges, harvested authentication secrets and staged mailbox data across organiz…
