The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities.

The post Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days appeared first on SecurityWeek.

A total of 22 patches were releaased, a majority for code execution, privilege escalation, and information disclosure vulnerabilities.

The post Microsoft Patches Exploited Entra ID Vulnerability appeared first on SecurityWeek.

The flaws can be exploited for remote code execution, authentication bypass, and device takeover.

The post CISA Urges Immediate Patching of Exploited Microsoft, VMware, Apple Vulnerabilities appeared first on SecurityWeek.