Microsoft confirms a Windows Recycle Bin bug in the June 2026 update that shows internal $R filenames when you delete a single file.

TL;DR Microsoft’s July 2026 Patch Tuesday fixes 570 vulnerabilities, including 57 rated critical and 510 rated important. Attackers are exploiting two zero-days in the wild: CVE-2026-56155 i…

Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action.

A Historic Season for Security Experts typically consider summer a quiet season for software updates. Nevertheless, the July patch release from Microsoft proved to be monumental. The corporation r…

Every month, Microsoft rolls out various Windows 10/11 updates in batches. These updates patch security vulnerabilities, fix functional bugs, add new features, or refresh system components. For no…

TL;DR A public proof-of-concept now targets CVE-2026-42980, a Windows privilege escalation flaw in the NT kernel. The bug lets a local, low-privileged user reach SYSTEM. Microsoft patched it in th…

TL;DR Researchers have published full technical details and working proof-of-concept code for Certighost, tracked as CVE-2026-54121. The Certighost AD CS vulnerability let a low-privileged domain …

TL;DR A researcher known as Pixis has published full details and proof-of-concept code for CVE-2026-50502. The flaw is a remote code execution bug in the Windows Event Log service, rated CVSS 8.0.…

TL;DR Researchers at Calif.io published full technical details and working proof-of-concept exploit code for CVE-2026-50343, tracked as Dark Elevator. The Windows privilege escalation bug, rated C…

TL;DR Microsoft August 2026 Patch Tuesday fixes 421 vulnerabilities, with 62 rated critical. One flaw, CVE-2026-68820, is already exploited in the wild. Microsoft also patched two other zero-days …

A field guide to auth bypass, privilege escalation, and RCE, using two real bugs from this week’s Patch Tuesday.

A researcher published full technical details and proof-of-concept code for a Windows HTTP.sys vulnerability on September 2026. Tracked as CVE-2026-62735, the flaw carries a 7.8 CVSS score. It let…

TL;DR Microsoft’s September 2026 Patch Tuesday fixes 996 vulnerabilities. Two of them are zero-days already exploited in the wild. Both are Windows elevation of privilege flaws that attacker…

The September Patch Tuesday became the largest security update release in Microsoft’s history. The company closed 966 vulnerabilities, two of which attackers had already wielded in real-worl…

This week, Microsoft released its latest security updates for every supported product, and the various components of Microsoft 365 within its office suite received them too. However, the security …

Last week, Microsoft released its routine September 2026 updates for every supported product. Among them, the Windows 11 24H2/25H2 update KB5124008 has, once installed, provoked several functional…

TL;DR Microsoft’s October 2026 Patch Tuesday fixes 1,414 vulnerabilities, including 78 rated critical, making it the company’s largest release yet. Three zero-day vulnerabilities are a…

The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.

Microsoft addressed 1,413 security vulnerabilities in its October 2026 Patch Tuesday update, making it the company’s largest monthly security release to date.

Microsoft is warning admins about Exchange Server instability after the October 2026 Patch Tuesday cycle. Since October 13, some on-premises servers have started failing under load. However, the c…