[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKBd-qQGSAAtDFY7GVxM-Leq2w5xwiNn3hTKfQQGi1t8":3},{"article":4,"iocs":49,"watch_terms":60,"solutions":61,"lesson":155},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"9f9ffe2a-55eb-4a5b-a777-2e426734a31f","Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day","microsoft-patches-record-1-413-vulnerabilities-including-exploited-windows-zero--36dc6a","The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.","Microsoft's October 2026 Patch Tuesday addresses a record 1,413 vulnerabilities, with 1,102 affecting Windows. A critical zero-day, CVE-2026-96951, a Windows shell security feature bypass that evades Mark of the Web defenses, has been exploited in the wild and added to CISA's KEV catalog. The surge in patched flaws, attributed partly to AI, has pushed the total for 2026 past 4,000.","Microsoft patches record 1,413 vulnerabilities, including an exploited Windows zero-day.","https:\u002F\u002Fwww.securityweek.com\u002Fmicrosoft-patches-record-1413-vulnerabilities-including-exploited-windows-zero-day\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F10\u002FWindows-10.jpeg","2026-10-14T07:16:12+00:00","2026-10-14T08:00:14.227842+00:00",9,[17,20,23,25,27,29],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Windows","product",{"name":24,"type":22},"Office",{"name":26,"type":22},"SharePoint Server",{"name":28,"type":22},"Exchange Server",{"name":30,"type":22},"Azure","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":31,"icon":33,"name":34,"slug":35},null,"Vulnerabilities","vulnerabilities",[37,42,44],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50,54,57],{"type":51,"value":52,"context":53},"cve","CVE-2026-96951","Exploited Windows zero-day, Windows shell security feature bypass",{"type":51,"value":55,"context":56},"CVE-2026-108398","Publicly disclosed vulnerability, bypasses Windows Defender Application Control",{"type":51,"value":58,"context":59},"CVE-2026-92707","DoS vulnerability affecting MessagePack-CSharp component in Visual Studio and .NET",[18,21,26],{"controls":62,"vendors":149},[63,91,120],{"slug":64,"name":65,"problem":66,"products":67},"patch-management","Automated patch management","Known holes get closed in days, not months.",[68,76,84],{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":77,"vendor_name":78,"vendor_logo":79,"product_slug":80,"product_name":81,"url":82,"description":83},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":85,"vendor_name":86,"vendor_logo":87,"product_slug":64,"product_name":88,"url":89,"description":90},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":92,"name":93,"problem":94,"products":95},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[96,104,112],{"vendor_slug":97,"vendor_name":98,"vendor_logo":99,"product_slug":100,"product_name":101,"url":102,"description":103},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":105,"vendor_name":106,"vendor_logo":107,"product_slug":108,"product_name":109,"url":110,"description":111},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":113,"vendor_name":114,"vendor_logo":115,"product_slug":116,"product_name":117,"url":118,"description":119},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"slug":121,"name":122,"problem":123,"products":124},"email-security","Email security","Phishing, malware and invoice fraud are filtered out before they reach inboxes.",[125,133,141],{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"cloudflare","Cloudflare","\u002Fvendor-logos\u002Fcloudflare.png","cloudflare-email-security","Cloudflare Email Security","https:\u002F\u002Fwww.cloudflare.com\u002Fsase\u002Fproducts\u002Femail-security\u002F","Email filtering for phishing and business email compromise.",{"vendor_slug":134,"vendor_name":135,"vendor_logo":136,"product_slug":137,"product_name":138,"url":139,"description":140},"proofpoint","Proofpoint","\u002Fvendor-logos\u002Fproofpoint.png","core-email-protection","Proofpoint Core Email Protection","https:\u002F\u002Fwww.proofpoint.com\u002Fus\u002Fproducts\u002Femail-protection","Email filtering for phishing, malware and business email compromise.",{"vendor_slug":142,"vendor_name":143,"vendor_logo":144,"product_slug":145,"product_name":146,"url":147,"description":148},"check-point","Check Point","\u002Fvendor-logos\u002Fcheck-point.png","harmony-email","Harmony Email & Collaboration","https:\u002F\u002Fwww.checkpoint.com\u002Fharmony\u002Femail-security\u002F","Email and collaboration security for Microsoft 365 and Google Workspace.",[150],{"slug":151,"name":18,"logo_path":152,"roles":153},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[154],"affected",{"slug":156,"title":157,"body":158,"framework_refs":159,"framework_notes":168},"record-1413-microsoft-vulnerabilities-patched-including-actively-exploited-zero-day","Record 1,413 Microsoft Vulnerabilities Patched, Including Actively Exploited Zero-Day","Microsoft's October 2026 Patch Tuesday revealed a record-breaking 1,413 vulnerabilities, including an actively exploited zero-day (CVE-2026-96951) that bypasses Mark of the Web (MotW) security protections — a critical defense mechanism designed to flag files downloaded from the internet. The fact that this flaw was exploited in the wild before a patch was available underscores the growing gap between vulnerability discovery and remediation. With over 4,000 vulnerabilities patched in 2026 alone — partly attributed to AI-assisted discovery — organizations face an unprecedented patching burden that strains security teams. Failure to prioritize and rapidly apply critical patches, especially those listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, leaves systems exposed to active threat actors.",[160,161,162,163,164,165,166,167],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","CISA Known Exploited Vulnerabilities (KEV) Catalog","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001:2022 — A.8.8: Management of Technical Vulnerabilities",{}]