During the September 2026 Patch Tuesday, Microsoft resolved no fewer than 964 CVEs: 104 critical and 860 important. Extra urgent: two zero-days (CVE-2026-81963 and CVE-2026-85880) are already being actively exploited and can grant attackers SYSTEM privileges. Serious vulnerabilities in Remote Desktop, Windows DNS, Kerberos, and Exchange Server, among others, have also been addressed. With 44.7% […]
The NCSC has withdrawn a warning for an alleged SQLite vulnerability (CVE-2026-51302) after it appeared that the bug was likely hallucinated by an LLM. Security researchers, SQLite developers, and Red Hat were unable to reproduce the vulnerability and have labeled it as fictitious. Notably, MITRE accepted the CVE despite a lack of sufficient verification, leading […]