Microsoft's October Security Update Fixes 1,400+ Vulnerabilities, One Exploited in the Wild

By Sergio De Simone · InfoQ · Wednesday, 28 October 2026 at 10:30 (9h ago) · Original article ↗

Microsoft's latest monthly security update addresses 1415 vulnerabilities across multiple products. One vulnerability affecting Windows Shell has been exploited in the wild, while 85 are classified as critical. Affected products include Windows OS, Office, Exchange,.NET, Edge, as well as potentially Hyper-V and Azure components.

You're reading a preview. The full article is published by InfoQ on their website.

Read the full story on InfoQ

Security

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

The PHP scare may have faded from your feed, but the cleanup is far from over. Last week, two critical bugs in the open source language behind roughly 70% of websites left organizations scrambling to fix their systems, with some taking sites offline until the vulnerabilities…

TechCrunch 26m ago

Security

Discord to let search engines index public server messages

Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without an account or invitation. [...]

BleepingComputer 47m ago

Security

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns

The China-nexus cyber espionage group known as Volt Typhoon has been attributed to a now-disrupted covert access network dubbed Silent Train that has been put to use for zero-day exploitation and strategic access. "First identified in late 2023, Silent Train uses rotating chains…

The Hacker News 1h ago

Microsoft's October Security Update Fixes 1,400+ Vulnerabilities, One Exploited in the Wild

More Security & Privacy

Wiz’s CTO on PHP2Shell and the coming ‘vulnpocalypse’

Discord to let search engines index public server messages

Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns