Ten desks. Straight reporting.
Security Brief/Brief
Microsoft released patches for a record-breaking 973 vulnerabilities in its September 2026 Patch Tuesday, including 113 rated critical and two exploited in the wild.
Microsoft released patches for a record-breaking 973 vulnerabilities in its September 2026 Patch Tuesday, including 113 rated critical. It is the largest Patch Tuesday to date, ahead of the previous high of 664 set in July 2026.
Two vulnerabilities are listed as exploited in the wild, while none were publicly disclosed before Patch Tuesday. Notable fixes include Windows privilege escalation and critical remote code execution flaws in Skype for Business, MSMQ and RRAS.
Each line below is stated by the page named above it, and only by that page.
Stated by SANS Internet Storm Center
Small teams running Windows, Skype for Business, MSMQ or RRAS should prioritize these updates, given the exploited-in-the-wild flaws and critical remote code execution vulnerabilities.
What the reporting says: The SANS ISC diary reports that Microsoft's September 2026 Patch Tuesday fixed a record 973 vulnerabilities, 113 critical, with two exploited in the wild and none publicly disclosed beforehand.
Found through monitored feeds: SANS Internet Storm Center. A feed address is how the desk finds a story, not the evidence for it — the sources listed above are the pages the facts were taken from.
Security Brief/Report
GitLab released fixes for a maximum-severity path traversal vulnerability, CVE-2026-85706, and a second critical flaw, CVE-2026-87719. The company urged self-managed installations to upgrade immediately,…
Security Brief/Brief
MikroTik released a patch late last week for an SSH authentication bypass that is already being exploited. SANS ISC advises affected organizations to assume…
Security Brief/Brief
Threat actors linked to a China-aligned espionage group are exploiting CVE-2026-51990, a critical vulnerability in Tencent's Sogou Input Method for Windows, to deploy the…