news
Almost 1000 New Holes in Microsoft's Stuff, But 'Linux' Foundation Presents Microsoft as 'Secure' and Security Expert
-
Silicon Angle ☛ ClickFix moves into the browser and onto WebDAV, Cisco Talos finds
Cisco Systems Inc.’s Talos Threat Intelligence group today detailed two ClickFix campaigns that push the technique past the copy-and-paste PowerShell prompt it is known for, one that never touches the operating system at all and one that ends in a stealer plus whichever follow-on payload the operators choose to task.
-
SANS ☛ September 2026 Abusive Monopolist Microsoft Patch Tuesday, (Tue, Sep 8th)
This month, Abusive Monopolist Microsoft released patches for a record-breaking 973 vulnerabilities, including 113 rated critical. It is by far the largest Patch Tuesday to date, well ahead of the previous high of 664 set in July 2026. Two vulnerabilities are listed as exploited in the wild, while none were publicly disclosed before Patch Tuesday. Notable fixes include backdoored Windows privilege escalation and critical RCEs in Skype for Business, MSMQ and RRAS.
-
Krebs On Security ☛ Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its backdoored Windows operating systems and other software, by far its biggest single patch batch ever. Abusive Monopolist Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.
-
Security Week ☛ Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities.
-
Scoop News Group ☛ Microsoft discloses two actively exploited zero-days among 974 vulnerabilities
While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to focus on their specific areas of risk and exposure.
-
OpenSSF (Linux Foundation) ☛ What’s in the SOSS? Podcast #72 – S3E24 Balancing AI’s Double-Edged Sword: Software Engineering, Unlearning, and Ecosystem Sustainability with Mark Russinovich [Ed: 'Linux' Foundation is platforming Microsoft propaganda, framing back doors as 'security'. Based on photo ops, Mark Russinovich is the man who hooked up Linus Torvalds with the famous criminal Bill Epsteingate.]