[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fvW_foRXEHM6anIxQV-YhSD5KfalttCVYXAeCwCI-biA":3},{"article":4,"iocs":53,"watch_terms":76,"solutions":77,"lesson":173},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"feff6f27-bda8-4f2b-aad6-a4b202c92f5a","Microsoft Fixes 1,413 Vulnerabilities in Record October Patch Tuesday Update","microsoft-fixes-1-413-vulnerabilities-in-record-october-patch-tuesday-update-33fd0b","Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly…","Microsoft's October 2026 Patch Tuesday update is its largest ever, addressing 1,413 security vulnerabilities across various products. The update includes a critical zero-day flaw in Windows Shell (CVE-2026-96951) that is actively exploited and bypasses Mark of the Web protections. Other significant patches address vulnerabilities in .NET Framework, MS Outlook, Microsoft QUIC, SharePoint Server, and SQL Server.","Microsoft releases record-breaking October update, fixing 1,413 vulnerabilities, including an actively exploited","https:\u002F\u002Fhackread.com\u002Fmicrosoft-fix-vulnerabilities-october-patch-tuesday-update\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F10\u002Fmicrosoft-fix-vulnerabilities-october-patch-tuesday-update.jpg","2026-10-14T08:23:05+00:00","2026-10-14T10:00:12.443845+00:00",9,[17,20,22,24,26,28],{"name":18,"type":19},"Windows Shell","product",{"name":21,"type":19},".NET Framework",{"name":23,"type":19},"MS Outlook",{"name":25,"type":19},"Microsoft QUIC",{"name":27,"type":19},"SharePoint Server",{"name":29,"type":19},"SQL Server","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,58,61,64,67,70,73],{"type":55,"value":56,"context":57},"cve","CVE-2026-96951","Actively exploited zero-day in Windows Shell bypassing MOTW",{"type":55,"value":59,"context":60},"CVE-2026-108398",".NET Framework security feature bypass via untrusted search path",{"type":55,"value":62,"context":63},"CVE-2026-92707","MessagePack-CSharp denial-of-service vulnerability",{"type":55,"value":65,"context":66},"CVE-2026-70242","MS Outlook heap-based buffer overflow",{"type":55,"value":68,"context":69},"CVE-2026-105016","Microsoft QUIC remote code execution vulnerability",{"type":55,"value":71,"context":72},"CVE-2026-102866","SharePoint Server cryptographic token verification vulnerability",{"type":55,"value":74,"context":75},"CVE-2026-65674","SQL Server code execution vulnerability",[18,21,23],{"controls":78,"vendors":166},[79,108,137],{"slug":80,"name":81,"problem":82,"products":83},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[84,92,100],{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":88,"product_name":89,"url":90,"description":91},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":96,"product_name":97,"url":98,"description":99},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":101,"vendor_name":102,"vendor_logo":103,"product_slug":104,"product_name":105,"url":106,"description":107},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"slug":109,"name":110,"problem":111,"products":112},"patch-management","Automated patch management","Known holes get closed in days, not months.",[113,121,129],{"vendor_slug":114,"vendor_name":115,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":122,"vendor_name":123,"vendor_logo":124,"product_slug":125,"product_name":126,"url":127,"description":128},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":130,"vendor_name":131,"vendor_logo":132,"product_slug":133,"product_name":134,"url":135,"description":136},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"slug":138,"name":139,"problem":140,"products":141},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[142,150,158],{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":151,"vendor_name":152,"vendor_logo":153,"product_slug":154,"product_name":155,"url":156,"description":157},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":159,"vendor_name":160,"vendor_logo":161,"product_slug":162,"product_name":163,"url":164,"description":165},"bitdefender","Bitdefender","\u002Fvendor-logos\u002Fbitdefender.png","gravityzone","GravityZone","https:\u002F\u002Fwww.bitdefender.com\u002Fen-us\u002Fbusiness\u002Fgravityzone-platform\u002F","Endpoint protection, detection and response platform.",[167],{"slug":168,"name":169,"logo_path":170,"roles":171},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[172],"affected",{"slug":174,"title":175,"body":176,"framework_refs":177,"framework_notes":187},"record-breaking-patch-tuesday-highlights-danger-of-delayed-patching","Record-Breaking Patch Tuesday Highlights Danger of Delayed Patching","Microsoft's largest-ever Patch Tuesday update — addressing 1,413 vulnerabilities in a single release — underscores the scale at which software complexity translates into exploitable attack surface. Most critically, a zero-day in Windows Shell (CVE-2026-96951) was already being actively exploited before the patch was available, meaning organizations running unpatched systems were exposed with no defensive window. The Mark of the Web bypass is particularly dangerous because it undermines a key OS-level trust mechanism used to warn users about files downloaded from the internet. When patch cycles fall behind or organizations lack mature vulnerability prioritization processes, adversaries can chain exploits like this across widely deployed Microsoft products to achieve lateral movement or full compromise. Timely, risk-ranked patch deployment is not optional — it is a foundational security control.",[178,179,180,181,182,183,184,185,186],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","CISA Known Exploited Vulnerabilities (KEV) Catalog","ITIL Change Management: Emergency Change Procedure","ISO 27001 Annex A.12.6.1: Management of Technical Vulnerabilities","GDPR Article 32: Security of Processing (timely remediation of known vulnerabilities)",{"NIST SI-2: Flaw Remediation":188,"NIST RA-5: Vulnerability Monitoring and Scanning":189,"CIS Control 7: Continuous Vulnerability Management":190,"CISA Known Exploited Vulnerabilities (KEV) Catalog":191,"ITIL Change Management: Emergency Change Procedure":192,"CIS Control 2: Inventory and Control of Software Assets":193,"ISO 27001 Annex A.12.6.1: Management of Technical Vulnerabilities":194,"NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning":195,"GDPR Article 32: Security of Processing (timely remediation of known vulnerabilities)":196},"Requires timely remediation, especially for the actively exploited zero-day.","Scanning confirms which systems are still missing critical patches.","Continuous vulnerability management means prioritising the exploited Windows Shell zero-day within a huge patch release.","KEV listing tells you which flaws in the release are being exploited and should go first.","Emergency change procedures let teams fast-track the patch for an exploited zero-day.","A software inventory helps confirm which systems need the Windows Shell patch.","Requires timely action on technical vulnerabilities in large patch releases.","Patch planning guidance helps organisations handle very large releases efficiently.","Requires appropriate security, including timely remediation of known exploited flaws."]