[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fain71MMFv9uWaPJnymmN0TSyJEF2TB5SGOuEO9ktOjU":3},{"article":4,"iocs":33,"watch_terms":34,"solutions":35,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":20,"category":21,"article_tags":25},"013d8f21-ce0c-4616-93ae-c37517a716e9","Zero-Days Lurk in Microsoft's Overgrown October Patch Tuesday","zero-days-lurk-in-microsoft-s-overgrown-october-patch-tuesday-d22f26","The scary surprises for the largest security update ever include security bypasses and unauthenticated RCEs.","Microsoft's October 2023 Patch Tuesday, the largest ever, included fixes for several zero-day vulnerabilities. These flaws allowed for security bypasses and unauthenticated remote code execution, posing significant risks to users who had not yet applied the updates.","Microsoft's October Patch Tuesday addresses zero-days with security bypasses and unauthenticated RCEs.","https:\u002F\u002Fwww.darkreading.com\u002Fvulnerabilities-threats\u002Fzero-days-microsoft-october-patch-tuesday","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblt2208c9717985ba6f\u002F6aceb2c101a45e612a7baa2b\u002Fharvest-China_Photos-GettyImages-71574532.jpg?width=720&quality=80&disable=upscale","2026-10-13T22:29:57+00:00","2026-10-14T00:00:04.039491+00:00",8,[17],{"name":18,"type":19},"Microsoft","vendor","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":20,"icon":22,"name":23,"slug":24},null,"Vulnerabilities","vulnerabilities",[26,31],{"category":27},{"id":28,"icon":22,"name":29,"slug":30},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":32},{"id":20,"icon":22,"name":23,"slug":24},[],[18],{"controls":36,"vendors":123},[37,66,94],{"slug":38,"name":39,"problem":40,"products":41},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[42,50,58],{"vendor_slug":43,"vendor_name":44,"vendor_logo":45,"product_slug":46,"product_name":47,"url":48,"description":49},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-vulnerability-management","Tenable Vulnerability Management","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fvulnerability-management","Cloud-based vulnerability scanning and prioritisation, built on Nessus.",{"vendor_slug":51,"vendor_name":52,"vendor_logo":53,"product_slug":54,"product_name":55,"url":56,"description":57},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":59,"vendor_name":60,"vendor_logo":61,"product_slug":62,"product_name":63,"url":64,"description":65},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":67,"name":68,"problem":69,"products":70},"patch-management","Automated patch management","Known holes get closed in days, not months.",[71,79,86],{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":80,"vendor_name":18,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":90,"product_name":91,"url":92,"description":93},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"slug":95,"name":96,"problem":97,"products":98},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[99,107,115],{"vendor_slug":100,"vendor_name":101,"vendor_logo":102,"product_slug":103,"product_name":104,"url":105,"description":106},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":108,"vendor_name":109,"vendor_logo":110,"product_slug":111,"product_name":112,"url":113,"description":114},"palo-alto-networks","Palo Alto Networks","\u002Fvendor-logos\u002Fpalo-alto-networks.png","cortex-xdr","Cortex XDR","https:\u002F\u002Fwww.paloaltonetworks.com\u002Fcortex\u002Fcortex-xdr","Endpoint detection and response with extended detection across network, cloud and identity.",{"vendor_slug":116,"vendor_name":117,"vendor_logo":118,"product_slug":119,"product_name":120,"url":121,"description":122},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",[124],{"slug":80,"name":18,"logo_path":81,"roles":125},[126],"affected",{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":139},"record-october-patch-tuesday-exposes-zero-day-risk-for-slow-patchers","Record October Patch Tuesday Exposes Zero-Day Risk for Slow Patchers","Microsoft's largest-ever Patch Tuesday in October 2023 addressed numerous vulnerabilities, including critical zero-days enabling security bypasses and unauthenticated remote code execution. Zero-day flaws are particularly dangerous because they are actively exploited before or immediately after disclosure, leaving organizations with a very narrow window to respond. The scale of this release highlights the growing complexity of modern software ecosystems and the compounding risk when patch backlogs accumulate. Organizations that lack a disciplined, prioritized patching process are especially exposed, as attackers actively scan for unpatched systems within hours of a patch release.",[132,133,134,135,136,137,138],"CIS Control 7: Continuous Vulnerability Management","CIS Control 2: Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning","NIST SI-2: Flaw Remediation","NIST RA-5: Vulnerability Monitoring and Scanning","ITIL Change Management: Emergency Change Procedures","ISO\u002FIEC 27001 Annex A 8.8: Management of Technical Vulnerabilities",{}]