Microsoft
Every ZeroDayFeed story on Microsoft — across breaches, zero-days, ransomware, patches, policy, and industry, newest first.
-
Patches & Advisories
Microsoft's record October Patch Tuesday fixes more than 1,400 flaws, including an exploited Mark-of-the-Web bypass
Microsoft's October 13 Patch Tuesday fixed a record of more than 1,400 vulnerabilities. One of them, CVE-2026-96951, is a Windows Shell Mark-of-the-Web bypass that attackers were already exploiting, and CISA added it to the KEV catalog the same day.
-
Patches & Advisories
October Windows Server updates break on-prem Exchange sign-in and mail flow; Microsoft publishes registry workaround
Microsoft says the October 2026 Windows Server updates can stall on-prem Exchange 2016, 2019 and Subscription Edition: OWA sign-in fails, mail stays in Outboxes and queues grow, because of a new Endpoint Mapper cap. The fix for now is a registry change, not removing the update.