Today in security.

Windows 11 · 74 items

1. Nippon Columbia malware incident exposes 8.6 million karaoke fan recordsBleepingComputer · Oct 11
2. Cyber exec arrested in case allegedly tied to ShinyHunters hackersBleepingComputer · Oct 10
3. ARTEX AI, Claude agents used in cyberattacks on South Korean banksBleepingComputer · Oct 10
4. Criminal IP Introduces AITEM as the Next Evolution of Attack Surface ManagementBleepingComputer · Oct 10
5. Why TLP should not replace your internal information classification, (Sat, Oct 10th)SANS Internet Storm Center · Oct 10
6. Microsoft 365 incident readiness for Microsoft Engage CenterWindows Release Health · Oct 9
7. Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacksBleepingComputer · Oct 9
8. Windows 11, version 26H1 known issues and notificationsWindows Release Health · Oct 9
9. Windows 11, version 23H2 known issues and notificationsWindows Release Health · Oct 9
10. Unpatched AhsayCBS flaws exploited to deploy webshells, mine cryptoBleepingComputer · Oct 9
11. FBI arrests another suspected ShinyHunters hacker after agency breachBleepingComputer · Oct 9
12. Germany arrests alleged core Qilin ransomware member after extraditionBleepingComputer · Oct 9
13. How to keep AI agents within their permissionsBleepingComputer · Oct 9
14. CVE-2026-62744 Microsoft Windows Media Foundation Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
15. CVE-2026-68875 Windows NTFS Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
16. CVE-2026-68878 Windows Fast FAT Driver Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
17. CVE-2026-69281 Windows License Manager Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
18. CVE-2026-69337 Windows Registry Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
19. CVE-2026-69451 Windows Management Instrumentation Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
20. CVE-2026-69582 Windows Volume Manager Extension Driver Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
21. CVE-2026-69693 Windows Device Association Broker Service Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
22. CVE-2026-69732 Windows Link Layer Topology Discovery Protocol Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
23. CVE-2026-72979 Windows DHCP Server Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
24. CVE-2026-72982 Windows Netlogon Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
25. CVE-2026-68880 Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
26. CVE-2026-69277 Microsoft Local Security Authority (LSA) Server Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
27. CVE-2026-69301 Windows Win32k Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
28. CVE-2026-69322 Microsoft Windows Search Component Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
29. CVE-2026-69324 Windows Performance Monitor Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
30. CVE-2026-69340 Windows NTFS Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
31. CVE-2026-69385 Windows TCP/IP Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
32. CVE-2026-69433 Windows Error Reporting Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
33. CVE-2026-69571 Windows USB Audio Class driver (usbaudio.sys) Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
34. CVE-2026-69566 Windows NTFS Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
35. CVE-2026-69688 Windows Encrypting File System (EFS) Elevation of Privilege VulnerabilityMicrosoft Security Update Guide · Oct 9
36. CVE-2026-72987 Windows DNS Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
37. CVE-2026-73006 DirectWrite Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
38. CVE-2026-69598 Windows iSCSI Remote Code Execution VulnerabilityMicrosoft Security Update Guide · Oct 9
39. Max severity SonicWall SMA1000 flaw now exploited in attacksBleepingComputer · Oct 9
40. Man admits to running network of 15,000 money mules for cybercriminalsBleepingComputer · Oct 9
41. Microsoft: Outdated Windows devices will stop receiving security updatesBleepingComputer · Oct 9
42. Citrix warns admins to patch new NetScaler RCE flaw immediatelyBleepingComputer · Oct 9
43. ISC Stormcast For Friday, October 9th, 2026 https://isc.sans.edu/podcastdetail/10130, (Fri, Oct 9th)SANS Internet Storm Center · Oct 9
44. Hackers get $1,262,000 for 98 zero-days at Pwn2Own IrelandBleepingComputer · Oct 9
45. Resolved issues in Windows 11, version 24H2Windows Release Health · Oct 8
46. Windows Server 2022 known issues and notificationsWindows Release Health · Oct 8
47. Windows Server 2025 known issues and notificationsWindows Release Health · Oct 8
48. Windows 10, version 1809 and Windows Server 2019 known issues and notificationsWindows Release Health · Oct 8
49. Resolved issues in Windows Server 2025Windows Release Health · Oct 8
50. Resolved issues in Windows Server 2022Windows Release Health · Oct 8
51. Windows 10, version 22H2 known issues and notificationsWindows Release Health · Oct 8
52. Windows 10, version 1607 and Windows Server 2016 known issues and notificationsWindows Release Health · Oct 8
53. Resolved issues in Windows 11, version 26H2Windows Release Health · Oct 8
54. Windows release healthWindows Release Health · Oct 8
55. Windows Server 2012 known issues and notificationsWindows Release Health · Oct 8
56. Windows 10 Enterprise LTSC 2021 known issues and notificationsWindows Release Health · Oct 8
57. Resolved issues in Windows 11, version 26H1Windows Release Health · Oct 8
58. FBI disrupts Chinese hacking tools used to breach critical infrastructureBleepingComputer · Oct 8
59. Post-quantum authentication: Why organizations should start testing certificate ecosystems nowMicrosoft Security Blog · Oct 8
60. Reconstructing AI Agent Activity: Two New Scripts for Forensic Review, (Thu, Oct 8th)SANS Internet Storm Center · Oct 8
61. KEV: CVE-2015-5477 — ISC BIND: ISC BIND Data Processing Errors VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
62. KEV: CVE-2016-3081 — Apache Struts: Apache Struts Command Injection VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
63. KEV: CVE-2023-22894 — Strapi Strapi: Strapi Cleartext Storage of Sensitive Information VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
64. KEV: CVE-2021-3199 — ONLYOFFICE Docs: ONLYOFFICE Docs Server Path Traversal VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
65. KEV: CVE-2015-3306 — ProFTPD ProFTPD: ProFTPD Improper Access Control VulnerabilityCISA Known Exploited Vulnerabilities (KEV) · Oct 8
66. ISC Stormcast For Thursday, October 8th, 2026 https://isc.sans.edu/podcastdetail/10128, (Thu, Oct 8th)SANS Internet Storm Center · Oct 7
67. 3 lessons from frontier AI vulnerability researchMicrosoft Security Blog · Oct 7
68. Scans for Atlassian vulnerablity (CVE-2026-21589), (Wed, Oct 7th)SANS Internet Storm Center · Oct 7
69. ISC Stormcast For Wednesday, October 7th, 2026 https://isc.sans.edu/podcastdetail/10126, (Wed, Oct 7th)SANS Internet Storm Center · Oct 6
70. CISO perspectives on managing vulnerability risks in the age of AIMicrosoft Security Blog · Oct 6
71. More RMM Tools In the Wild, (Tue, Oct 6th)SANS Internet Storm Center · Oct 6
72. ISC Stormcast For Tuesday, October 6th, 2026 https://isc.sans.edu/podcastdetail/10124, (Tue, Oct 6th)SANS Internet Storm Center · Oct 6
73. ISC Stormcast For Monday, October 5th, 2026 https://isc.sans.edu/podcastdetail/10122, (Mon, Oct 5th)SANS Internet Storm Center · Oct 4
74. TTY Logs and the Data it Captures, (Sun, Oct 4th)SANS Internet Storm Center · Oct 4