[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUUXFs46ybq7BiV6de8DuVUr1y4p1A9Os7a7ubvRnqd4":3},{"article":4,"iocs":50,"watch_terms":61,"solutions":62,"lesson":132},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":32,"category":33,"article_tags":37},"c14fc9ce-fa81-484a-bbd3-8cd27b39078e","Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days","microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days-6d5f00","Today is Microsoft's October 2026 Patch Tuesday, with security updates addressing a record-breaking 1,411 flaws, including one actively exploited and two publicly disclosed zero-day vulnerabilities. [...]","Microsoft's October 2026 Patch Tuesday has released updates for a record-breaking 1,411 vulnerabilities. Among these are three zero-day flaws: one actively exploited security feature bypass in Windows Shell (CVE-2026-96951), and two publicly disclosed vulnerabilities, including a .NET Framework security feature bypass (CVE-2026-108398) that could allow unauthorized application execution and bypass Windows Defender Application Control.","Microsoft's October 2026 Patch Tuesday addresses 1,411 flaws, including 3 zero-days.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F10\u002F08\u002Fpatch_tuesday_microsoft.jpg","2026-10-13T19:56:09+00:00","2026-10-13T20:00:10.882832+00:00",9,[17,20,22,24,27,30],{"name":18,"type":19},"Windows 11","product",{"name":21,"type":19},"Windows 10 Enterprise LTSB 2016",{"name":23,"type":19},".NET Framework",{"name":25,"type":26},"Microsoft","vendor",{"name":28,"type":29},"Windows Defender Application Control","technology",{"name":31,"type":19},"Windows Shell","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":32,"icon":34,"name":35,"slug":36},null,"Vulnerabilities","vulnerabilities",[38,43,45],{"category":39},{"id":40,"icon":34,"name":41,"slug":42},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":44},{"id":32,"icon":34,"name":35,"slug":36},{"category":46},{"id":47,"icon":34,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[51,55,58],{"type":52,"value":53,"context":54},"cve","CVE-2026-96951","Actively exploited Windows Shell Security Feature Bypass Vulnerability",{"type":52,"value":56,"context":57},"CVE-2026-108398","Publicly disclosed .NET Framework Security Feature Bypass Vulnerability",{"type":52,"value":59,"context":60},"CVE-2026-92707","Publicly disclosed vulnerability (details truncated in excerpt)",[25,18,21],{"controls":63,"vendors":128},[64,93,121],{"slug":65,"name":66,"problem":67,"products":68},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[69,77,85],{"vendor_slug":70,"vendor_name":71,"vendor_logo":72,"product_slug":73,"product_name":74,"url":75,"description":76},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"slug":94,"name":95,"problem":96,"products":97},"patch-management","Automated patch management","Known holes get closed in days, not months.",[98,106,114],{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":115,"vendor_name":25,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"slug":122,"name":123,"problem":124,"products":125},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[126,127],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},{"vendor_slug":115,"vendor_name":25,"vendor_logo":116,"product_slug":117,"product_name":118,"url":119,"description":120},[129],{"slug":115,"name":25,"logo_path":116,"roles":130},[131],"affected",{"slug":133,"title":134,"body":135,"framework_refs":136,"framework_notes":148},"record-1411-vulnerabilities-patched-including-3-zero-days-in-microsoft-october-2026-patch-tuesday","Record 1,411 Vulnerabilities Patched Including 3 Zero-Days in Microsoft October 2026 Patch Tuesday","Microsoft's October 2026 Patch Tuesday addressed a record-breaking 1,411 vulnerabilities, including three zero-days — one of which was already being actively exploited in the wild via a Windows Shell security feature bypass. The .NET Framework bypass (CVE-2026-108398) is particularly dangerous as it allows unauthorized applications to execute while evading Windows Defender Application Control, a critical last-line defense. The sheer volume of vulnerabilities highlights the growing complexity of modern software ecosystems and the mounting pressure on security teams to triage and apply patches at scale. Delayed patching — especially for actively exploited zero-days — dramatically increases the window of opportunity for threat actors to compromise systems before defenses are updated.",[137,138,139,140,141,142,143,144,145,146,147],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","CIS Control 10: Malware Defenses","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST SI-3: Malicious Code Protection","NIST RA-5: Vulnerability Monitoring and Scanning","NIST CM-7: Least Functionality \u002F Application Allowlisting","ITIL: Change and Release Management (Emergency Change Procedures)","MITRE ATT&CK: T1211 - Exploitation for Defense Evasion","MITRE ATT&CK: T1059 - Command and Scripting Interpreter (Windows Shell)",{}]