Patch Tuesday

Nightmare Eclipse released a zero-day exploit called "ShieldBreak," which targets Microsoft Defender and grants SYSTEM privileges. The exploit was released following the August 2026 Patch Tuesday security updates issued by Microsoft.

Microsoft's Windows Server Update Services (WSUS) is experiencing severe performance issues due to a buildup of publishing metadata, causing synchronization delays and timeouts. Microsoft has deployed a mitigation for new installations but lacks a solution for existing servers, advising organizations to transition to cloud-based alternatives. The problem began impacting systems on July 13, 2026, and affects a wide range of supported Windows operating systems.

Microsoft has broken its Patch Tuesday record for the second consecutive month by disclosing 622 vulnerabilities, exceeding the total from the previous three months combined. Vulnerability counts have been increasing this year.

Microsoft has released a security patch to address a Defender zero-day vulnerability known as 'RoguePlanet,' which was disclosed after the June 2026 Patch Tuesday.

Microsoft released its largest Patch Tuesday update on record, addressing vulnerabilities, including one currently under active attack. The company's security leadership noted that AI tools are accelerating vulnerability discovery in the industry.

Patch Tuesday saw a record 206 CVEs addressed, with artificial intelligence accelerating vulnerability discovery and potentially leading to more frequent large-scale patch updates.

Microsoft has introduced MDASH, a multi-model AI system for vulnerability discovery and remediation. The system is being tested by some customers as part of a limited private preview. MDASH has already found 16 Windows flaws that were fixed in Patch Tuesday.

Microsoft's Patch Tuesday has 137 flaws to patch, including nine critical ones, but no zero-day exploits are in sight, a first in two years. Admins have plenty of work to do despite the lack of zero-days. The patches address various security issues.

Microsoft has released the Windows 10 KB5087544 extended security update to fix May 2026 Patch Tuesday vulnerabilities and resolve an issue with Remote Desktop warnings. This update aims to improve security and stability. The release is part of Microsoft's regular updates to protect its operating system.

Microsoft's May 2026 Patch Tuesday security updates fixed 120 flaws with no zero-days disclosed. The patches address various vulnerabilities in Microsoft's products. This update is part of Microsoft's regular Patch Tuesday cycle.

Microsoft confirmed active exploitation of a high-severity spoofing vulnerability (CVE-2026-32202) in Windows Shell, which could allow attackers to access sensitive information. The flaw was patched in its latest Patch Tuesday update, but malicious actors are already exploiting it in the wild.

Microsoft has introduced a new policy setting allowing IT administrators to uninstall the AI-powered Copilot digital assistant from enterprise devices. The feature became broadly available following the April 2026 Patch Tuesday update.

A 17-year-old critical Excel vulnerability is being actively exploited, prompting CISA to issue an alert. Microsoft addressed the flaw via Patch Tuesday updates, but the outdated bug remains a target for cyberattacks.

Microsoft has released the Windows 10 KB5082200 extended security update to address vulnerabilities from April 2026 Patch Tuesday, including two zero-day flaws. The update aims to enhance system security by fixing critical issues identified in the patch cycle.

Microsoft released security updates in April 2026, addressing 167 flaws and two zero-day vulnerabilities. The patches are part of their regular Patch Tuesday updates, aimed at improving system security.