Microsoft\u2019s latest Patch Tuesday release broke another record this month, surpassing 900 vulnerabilities for the first time. <\/p>\n
The federal cyberdefense agency, CISA, confirmed that two of them \u2014 CVE-2026-81963 and CVE-2026-85880 \u2014 are being exploited by hackers. Federal agencies have until September 22 to patch them.\u00a0 <\/p>\n
Tenable\u2019s Satnam Narang said CVE-2026-81963 relates to a component used to install Windows updates and CVE-2026-85880 affects a messaging system in Windows. More than 22,000 corporate Exchange servers are unpatched against weaponized exploit code, according to Nightwing cybersecurity expert Nick Carroll.\u00a0 <\/p>\n
Others explained that bugs like CVE-2026-81963 are the first step in a ransomware chain where hackers phish one user and use their access to gain escalated privileges.\u00a0 <\/p>\n
\u201cThe component makes it worse. An attacker who owns the update stack owns the thing you’d use to evict them,\u201d Automox engineer Serena DiPenti said. \u201cIf you can’t say when the update stack last ran, you can’t say whether it’s patched.\u201d <\/p>\n
The two are among 973 bugs<\/a> disclosed on Patch Tuesday by Microsoft. The company set a previous record in July with fixes for more than 600 security vulnerabilities<\/a> \u2014 which itself was triple the size of the previous record set the month before<\/a>. <\/p>\n Cybersecurity researchers and defenders have warned for months that the use of artificial intelligence code-review tools would prompt an onslaught of minor vulnerabilities that could be chained together for dangerous attacks.\u00a0 <\/p>\n Narang noted that the latest Patch Tuesday release pushes the year\u2019s total bugs disclosed over 2,600, which is already more than double the previous record-setting year of 2020.\u00a0Qualys cybersecurity expert Diksha Ojha added that another vulnerability announced<\/a> by Adobe this month was a critical-severity bug<\/a> in Adobe Commerce.\u00a0 <\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft\u2019s latest Patch Tuesday release broke another record this month, surpassing 900 vulnerabilities for the first time. The…\n","protected":false},"author":2,"featured_media":618738,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[61,60,80],"class_list":["post-618737","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-ie","tag-ireland","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/618737","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/comments?post=618737"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/posts\/618737\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media\/618738"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/media?parent=618737"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/categories?post=618737"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/ie\/wp-json\/wp\/v2\/tags?post=618737"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}