[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6wCz4n0SlnTBq7njye_V_FcI9Ot-gGolsR-dsXPFhms":3},{"article":4,"iocs":36,"watch_terms":37,"solutions":38,"lesson":100},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":28},"7d3a10b4-06df-4251-9b6f-334fcd4e0d7c","Microsoft releases Windows 10 KB5126657 extended security update","microsoft-releases-windows-10-kb5126657-extended-security-update-2b22e9","Microsoft released the Windows 10 KB5126657 extended security update, which includes this month's record-breaking October 2026 Patch Tuesday fixes and a few bug fixes and changes. [...]","Microsoft has released the Windows 10 KB5126657 extended security update, incorporating fixes from the October 2026 Patch Tuesday, which addressed a record 1,411 vulnerabilities, including an actively exploited zero-day. The update also includes bug fixes and changes, such as permanent Daylight Savings Time support for British Columbia and Alberta, and auditing controls for ReFS volumes.","Microsoft releases Windows 10 KB5126657 with October 2026 Patch Tuesday fixes.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-releases-windows-10-kb5126657-extended-security-update\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2024\u002F09\u002F10\u002Fwindows-10-gradient.jpg","2026-10-13T19:47:30+00:00","2026-10-13T20:00:10.882832+00:00",7,[17,20],{"name":18,"type":19},"Windows 10","product",{"name":21,"type":22},"Microsoft","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":23,"icon":25,"name":26,"slug":27},null,"Vulnerabilities","vulnerabilities",[29,31],{"category":30},{"id":23,"icon":25,"name":26,"slug":27},{"category":32},{"id":33,"icon":25,"name":34,"slug":35},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":39,"vendors":94},[40,69],{"slug":41,"name":42,"problem":43,"products":44},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[45,53,61],{"vendor_slug":46,"vendor_name":47,"vendor_logo":48,"product_slug":49,"product_name":50,"url":51,"description":52},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"vendor_slug":62,"vendor_name":63,"vendor_logo":64,"product_slug":65,"product_name":66,"url":67,"description":68},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"slug":70,"name":71,"problem":72,"products":73},"patch-management","Automated patch management","Known holes get closed in days, not months.",[74,82,86],{"vendor_slug":75,"vendor_name":76,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":46,"vendor_name":47,"vendor_logo":48,"product_slug":70,"product_name":83,"url":84,"description":85},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",[95],{"slug":96,"name":21,"logo_path":97,"roles":98},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png",[99],"affected",{"slug":101,"title":102,"body":103,"framework_refs":104,"framework_notes":113},"windows-10-extended-security-update-addresses-record-1411-vulnerabilities-including-actively-exploit","Windows 10 Extended Security Update Addresses Record 1,411 Vulnerabilities Including Actively Exploited Zero-Day","Microsoft's release of KB5126657 highlights the staggering scale of modern vulnerability management, with a single Patch Tuesday cycle addressing 1,411 vulnerabilities — including at least one zero-day already being exploited in the wild. The existence of an actively exploited zero-day underscores the critical window of exposure organizations face between vulnerability disclosure and patch deployment. Systems running unpatched versions of Windows 10 remain at immediate risk, making timely update adoption non-negotiable. Organizations still relying on Extended Security Updates (ESUs) are operating on borrowed time, as this support tier signals end-of-mainstream-life software that carries elevated operational and security risk.",[105,106,107,108,109,110,111,112],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001:2022 Annex A 8.8: Management of Technical Vulnerabilities","GDPR Article 32: Security of Processing (timely remediation of known risks)",{}]