[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f7gUiCdfNPf80bCQZHdkn2Ua0bR5iUo_WRFNQE6gbrwc":3},{"article":4,"iocs":44,"watch_terms":49,"solutions":50,"lesson":140},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"0eb78025-d786-42d2-93ec-20afe52ac6bb","Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities","microsoft-drops-an-actively-exploited-zero-day-among-record-high-of-1-413-vulner-6fb878","In its October Patch Tuesday, the tech giant addressed more defects in one month than any annual total on record. Nearly 4 in 5 vulnerabilities affect Windows. The post Microsoft drops an actively exploited zero-day among record high of 1,413 vulnerabilities appeared first on CyberScoop.","Microsoft's October Patch Tuesday addressed a record-breaking 1,413 vulnerabilities, surpassing its previous annual total. While the sheer volume is overwhelming, only one actively exploited zero-day, affecting Windows Shell (CVE-2026-96951), was disclosed. Experts advise prioritizing patches based on exploitability rather than just the number of CVEs.","Microsoft patched 1,413 vulnerabilities, including one actively exploited zero-day.","https:\u002F\u002Fcyberscoop.com\u002Fmicrosoft-patch-tuesday-october-2026\u002F","https:\u002F\u002Fcyberscoop.com\u002Fwp-content\u002Fuploads\u002Fsites\u002F3\u002F2024\u002F09\u002FGettyImages-1408775753.jpg","2026-10-14T17:42:11+00:00","2026-10-14T18:00:05.694737+00:00",8,[17,20,23],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Windows Shell","product",{"name":24,"type":25},"AI","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":26,"icon":28,"name":29,"slug":30},null,"Vulnerabilities","vulnerabilities",[32,37,39],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[45],{"type":46,"value":47,"context":48},"cve","CVE-2026-96951","Actively exploited zero-day vulnerability in Windows Shell",[18,21],{"controls":51,"vendors":136},[52,81,108],{"slug":53,"name":54,"problem":55,"products":56},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[57,65,73],{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":69,"product_name":70,"url":71,"description":72},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":82,"name":83,"problem":84,"products":85},"patch-management","Automated patch management","Known holes get closed in days, not months.",[86,93,101],{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":82,"product_name":90,"url":91,"description":92},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":102,"vendor_name":18,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":43,"name":109,"problem":110,"products":111},"Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",[112,120,128],{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-adversary-intelligence","Falcon Adversary Intelligence","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fthreat-intelligence\u002F","Threat intelligence on the adversaries CrowdStrike tracks, built into the Falcon platform to detect, disrupt and defend against them.",{"vendor_slug":121,"vendor_name":122,"vendor_logo":123,"product_slug":124,"product_name":125,"url":126,"description":127},"defused","Defused","\u002Fvendor-logos\u002Fdefused.png","defused-tf","Defused TF","https:\u002F\u002Fdefusedcyber.com\u002Fproduct\u002Ftf","Threat intelligence feed from honeypots Defused runs on several continents, showing which vulnerabilities attackers are exploiting right now, with payloads and indicators.",{"vendor_slug":129,"vendor_name":130,"vendor_logo":131,"product_slug":132,"product_name":133,"url":134,"description":135},"recorded-future","Recorded Future","\u002Fvendor-logos\u002Frecorded-future.png","recorded-future-cyber-operations","Recorded Future Cyber Operations","https:\u002F\u002Fwww.recordedfuture.com\u002Fproducts\u002Fcyber-operations","Threat intelligence built into security operations workflows, to prioritise alerts and act on threats before they arrive.",[137],{"slug":102,"name":18,"logo_path":103,"roles":138},[139],"affected",{"slug":141,"title":142,"body":143,"framework_refs":144,"framework_notes":153},"record-1413-microsoft-vulnerabilities-highlight-patch-prioritization-crisis","Record 1,413 Microsoft Vulnerabilities Highlight Patch Prioritization Crisis","Microsoft's October Patch Tuesday disclosed a staggering 1,413 vulnerabilities, including one actively exploited zero-day in Windows Shell (CVE-2026-96951), underscoring the growing complexity of modern patch management. The sheer volume of CVEs makes it practically impossible for security teams to patch everything simultaneously, creating dangerous windows of exposure. Organizations that treat all vulnerabilities equally risk diverting resources away from the most critical, actively exploited flaws toward lower-severity issues. This record-breaking release demonstrates that vulnerability management must evolve from a simple 'patch everything' approach to an intelligence-driven, risk-based prioritization model. Failure to quickly address actively exploited zero-days can result in ransomware, data breaches, and full system compromise.",[145,146,147,148,149,150,151,152],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST CSF ID.RA-1: Asset vulnerabilities are identified and documented","NIST CSF RS.MI-3: Newly identified vulnerabilities are mitigated or documented as accepted risks","CISA KEV (Known Exploited Vulnerabilities) Catalog","ISO 27001 Annex A.12.6.1: Management of Technical Vulnerabilities","ITIL 4: Change Enablement and Problem Management practices",{}]