Search
Articles · 26

Microsoft discloses high-severity ASP.NET Core DoS flaw CVE-2026-109468
Microsoft disclosed CVE-2026-109468, a 7.5 ASP.NET Core denial-of-service flaw affecting Visual Studio 2022 before 17.14.42, Visual Studio 2026 before 18.10.4, and System.Formats.Cbor before 10.0.13.

Microsoft SharePoint Server Subscription Edition hit by CVE-2026-108452
Microsoft disclosed CVE-2026-108452, an 8.8 path traversal RCE in SharePoint Server Subscription Edition before 16.0.20326.20190. KB5002927 fixes it; an authenticated Site Owner can exploit it over the network.

Windows 11 Photos app adds unified Gallery and faster Editor
Microsoft announced a new Photos app for Windows 11 with a unified Gallery, a faster Editor and a redesigned Viewer, rolling out to Insiders starting today. The update combines local, OneDrive and iCloud photos; the Editor launches 25 percent faster and the Viewer starts 15 percent faster on average, up to 30 percent for HEIC images.

Microsoft fixes 10 VS Code flaws in 1.141.1, led by a 9.6 remote code execution bug
Microsoft's October security release lists 10 Visual Studio Code vulnerabilities, all rated Important, led by a 9.6 remote code execution bug. None are exploited or publicly disclosed. Users should update to VS Code 1.141.1.

Microsoft October 2026 Patch Tuesday Fixes 1,411 Flaws, Including Three Zero-Days, One Actively Exploited
Microsoft's October 2026 Patch Tuesday fixes a record 1,411 flaws, according to BleepingComputer, including 70 rated Critical and three zero-days. One, a Windows Shell security feature bypass tracked as CVE-2026-96951, is under active attack, and CISA has ordered federal agencies to patch it by October 16.

Microsoft patches four critical flaws in 365 Apps For Enterprise
Microsoft has published details on four critical vulnerabilities affecting Microsoft 365 Apps For Enterprise and related Office products. All four flaws carry CVSS scores of 9.8 and allow remote code execution over a network.

Microsoft to scale Azure Maia chips to multi-gigawatt deployments from 2027
Microsoft will scale its Azure Maia accelerators to multi-gigawatt deployments starting in 2027, making Maia its primary inference system. Maia 200 is in production now, and Microsoft expects Maia 300 to deliver 40% more tokens per megawatt than leading GPU systems.

Microsoft discloses CVE-2026-83947 in Azure Event Grid
Microsoft has disclosed CVE-2026-83947, a CVSS 7.7 HIGH spoofing vulnerability in Azure Event Grid caused by missing authorization. Microsoft says it has already fully mitigated the cloud-service flaw and customers have nothing to do.

Critical CVE-2026-77900 Hits Microsoft Azure App Service for Linux
A critical vulnerability CVE-2026-77900 affects Microsoft Azure App Service for Linux with a CVSS score of 9.8. The flaw allows an unauthenticated attacker to execute code over the network. Microsoft says it has already fully mitigated the flaw; no customer action is needed.

Critical CVE-2026-88131 hits Microsoft Dataverse with remote code execution
Microsoft Dataverse is affected by critical vulnerability CVE-2026-88131, which allows remote code execution. The flaw scores 9.8 on CVSS; Microsoft says it has already fully mitigated it and customers have nothing to patch.

First Nvidia RTX Spark laptops range from $2,599 to nearly $7,000
The first laptops built on Nvidia's RTX Spark chip, from Microsoft, Asus, Dell, HP, Lenovo and MSI, start at $2,599 and climb to $6,999.99 for a maxed-out Asus ProArt P16 with 128GB of unified memory, The Verge reports. The first models ship as early as October 16.

Meta and Microsoft Slash Employee Claude AI Spending
Meta and Microsoft are cutting employee use of Anthropic’s Claude AI and directing staff toward their own coding tools, The Information reported. The changes reflect tighter internal AI budgets while customer access to Claude through Microsoft platforms continues to expand.

Microsoft preparing local MAI-Code-1.1-Flash for high-end PCs
Microsoft has introduced a local edition of MAI-Code-1.1-Flash that runs on Windows PCs without server access. The model requires substantial memory and is coming to GitHub Copilot in experimental preview by the end of October, starting with Nvidia RTX Spark PCs.

Microsoft opens Surface Laptop Ultra preorders and pushes AI agents deeper into Windows
At its Windows and Surface event, Microsoft opened preorders for the $2,599 Surface Laptop Ultra and the $5,999 Surface RTX Spark Dev Box, and said Copilot will be able to use files and act across Windows in the coming months.

NVIDIA, Microsoft Open RTX Spark Preorders and Push AI Agents on Windows PCs
NVIDIA and Microsoft opened RTX Spark preorders and made Microsoft Execution Containers generally available at the Windows AI and Surface event, aimed at running AI agents on Windows PCs. RTX Spark laptops, first introduced in June, are on preorder today with up to 128 GB unified memory and one petaflop of AI compute, shipping October 16.

Microsoft is giving Copilot access to your Windows files and the power to act on them
Microsoft says Copilot on Copilot+ PCs will be able to use files and recent activity on your PC, take actions across Windows, and tap local AI models, with your permission. The features are expected to start rolling out in the coming months.

Windows 11 Insider Builds Add Updated Search and Battery Widget
Microsoft released new Windows 11 Insider Preview builds to Beta and Experimental channels on October 7. The updates introduce a redesigned Windows Search with inline actions and a Battery Status widget.

Microsoft introduces Magnetic Connect charging for Surface Laptop Ultra
Microsoft announced Magnetic Connect, a magnetic USB-C charging solution for the Surface Laptop Ultra that keeps the port's video and data functions. The laptop starts at $2,599 and begins shipping October 16.

Microsoft Turns Windows Task Bar Search Into AI Chatbot This Fall
Microsoft will turn the Windows Task Bar search menu into a chatbot interface this fall that handles thousands of actions through typed commands. The redesign lets users control settings, access Copilot and send messages without separate apps.

Microsoft shows hybrid AI running large models locally on Windows
Microsoft demonstrated hybrid intelligence on Windows that runs AI models from 70 billion to 284 billion parameters locally. The approach keeps data on-device, supports offline use, and switches to cloud models for heavier tasks.

Surface Laptop Ultra will launch October 16 starting at $2,599
Microsoft has set an October 16 launch date for the Surface Laptop Ultra with pricing from $2,599. The RTX Spark-powered laptop targets premium creative, gaming, and AI workloads.

Surface RTX Spark Dev Box opens preorder at $5,999
Microsoft’s Surface RTX Spark Dev Box is available for preorder at $5,999 with November shipping. The Nvidia-powered mini PC targets developers running local AI models exceeding 120B parameters.

Microsoft Rolls Out Windows 11 2026 Update as Small Enablement Package
Microsoft has begun rolling out Windows 11 version 26H2 as a small enablement package. The update resets support timelines and offers no exclusive new features for users already on recent versions.

Microsoft Outlook Flaw CVE-2026-100208 Could Allow Remote Code Execution
Microsoft Office Outlook has an integer overflow flaw, CVE-2026-100208, that could let an unauthorized attacker run code over a network. Microsoft scores it 7.5 (High), and an attack needs user interaction.

CISA Adds Microsoft SharePoint Code Injection Flaw CVE-2026-65660 to KEV
CISA added CVE-2026-65660, a Microsoft SharePoint code injection vulnerability, to its Known Exploited Vulnerabilities catalog on September 25, with a federal deadline of September 28. The flaw could let an authorized attacker execute code over a network and carries a Microsoft CVSS 3.1 score of 8.8.

Microsoft unveils Surface Pro 12-inch and Laptop 13-inch with Snapdragon X2 Plus
Microsoft announced the Surface Pro 12-inch and Surface Laptop 13-inch with Snapdragon X2 Plus at the Snapdragon Summit, citing up to 95% faster on-device AI and 18% better battery efficiency. The devices maintain prior form factors while adding features such as Ink Canvas and a recycled-content enclosure, with the Pro model priced from $1149.99 and shipping October 13.
From the feed · 54
KB5127648 resolves crashes in games and apps using AC-3 audio decoding after the September KB5124010 preview update on Windows 11 24H2 and later. Microsoft recommends installing the October Patch Tuesday update on affected systems.
Exchange admins spent their weekend on registry fixes after October Windows Server updates set a 512 simultaneous Endpoint Lookup call limit that destabilized OWA and email queues on busy 2016-2025 servers. Microsoft says not all systems are affected equally and is investigating.
Microsoft fixed a bug in classic Outlook that hid Copilot buttons from licensed users. The client had stopped retrieving required account details from the Outlook profile.
£270 million ValueLicensing claim against Microsoft advances after the Court of Appeal refused permission to take the second-hand license dispute to the Supreme Court. A 2013 internal deck labeled a Known Adverse Document remains undisclosed.
RTX Spark laptops starting at $2,399 are now available with NVIDIA Blackwell RTX graphics. • Up to 128GB unified memory • Up to 1 petaflop of AI compute • Systems from ASUS, Dell, HP, Lenovo, Microsoft and MSI
After a 22-year run as an independent company, Inrix is selling substantially all of its assets to Allstate’s Arity. The former Microsoft spinout had explored an IPO multiple times.
Michelangelus, a typeface drawn from Michelangelo's Vatican manuscripts and Pietà inscriptions, joins Microsoft 365 with over 500 glyphs across regular, italic, bold, and bold italic styles.
Microsoft announced a whitepaper with NVIDIA that gives enterprises a shared taxonomy, evaluations, and controls for open-weight AI model risks.
Microsoft Signal magazine Issue 6 examines AI race-day decisions at the F1 Miami Grand Prix and early wildfire detection on California's front lines.
Project Odeon, a test Settings app, has appeared in the Microsoft Store for Windows 11 build 26100 and newer. The modular build could allow Store-based updates and pull more Control Panel functions into one place.
Apple and Nvidia each pledged $25 million toward President Trump’s White House ballroom, making them two of the largest donors on an internal list obtained by The Washington Post, 9to5Mac reports. Other tech pledges on the list include $22 million from Google and $10 million each from Microsoft and Palantir.
Theo Browne says a ~$24,000 Claude Opus 5.5 run ported Microsoft’s Go-based TypeScript 7 compiler to Rust, and claims the port runs about twice as fast as tsc 7 and 12.5 times as fast as v6 while passing nearly all conformance tests, The Register reports.
Three Seattle-area startups made Time's Best Inventions list this year. OneCourt, Yoodli and Tin Can joined Amazon and SpaceX, while Microsoft was left off.
Microsoft Edge announced a seamless-updates prototype that applies new versions in the background while open tabs and work continue without a restart. Restart to update on idle is available now for idle devices, and Security Update Alerts are live in the Edge management service for organizations.
Nvidia, Apple, Google, Microsoft, Amazon, and Meta gave a combined $92 million for Trump’s White House ballroom, according to a Washington Post donor list cited by The Verge. Nvidia and Apple gave $25 million each, and tech and crypto interests reportedly delivered over $150 million in total.
Microsoft says RTX Spark laptops get a new Get Started setup that installs an AI agent in about two clicks, with agents installed and updated through the Windows Store. Hermes, Perplexity, and OpenClaw are the first three supported agents at launch, and Microsoft’s Surface Laptop Ultra can ship with up to 128GB of unified memory.
Microsoft fixed the black screen, desktop loading, and Explorer crash issue that followed Windows 11 updates since August. The fix shipped in the October 13 cumulative updates and applies mainly to Azure Virtual Desktop hosts running FSLogix.
Free fiber subscribers report 40-140 Mb/s on 8 Gbit/s FTTH lines, with high latency to Google and Microsoft servers. Issues center on the backbone and affect Île-de-France plus scattered reports elsewhere.
Python 3.15 selects the native Arm64 runtime by default on Windows on Arm devices, Microsoft says, with NumPy, pandas, Django and more than 2,500 Anaconda packages available natively.
Microsoft's new bias-correction tool improved the accuracy of ECMWF's leading physics-based weather model for 98 percent of precipitation targets and 92 percent of temperature targets two to six weeks ahead, and doubled the accuracy of ECMWF's new AI forecasting system in the study. Microsoft says it runs on CPUs alone, The Verge reports.
Microsoft's October Patch Tuesday update fixes a Windows 11 bug that caused mouse stuttering during gameplay. The one-line note in KB5127648 covers the issue without naming affected titles or root cause.
Tiny11 Builder's new WinUI 3 desktop app creates debloated Windows 11 ISOs from 22H2 media onward without PowerShell. Three modes range from keeping Defender and updates to irreversible Core cuts that drop recovery tools and Microsoft support.
Microsoft released KB5127648 and KB5127646 to fix Always On VPN failures on Windows 11 24H2 and later. The updates resolve stuck connections and port-in-use errors that followed September security patches when automatic protocol selection was enabled.
Microsoft's Digital Crimes Unit disrupted a Chinese-language phishing ecosystem linking kit operators tracked as Storm-2990 with the Storm-3119 illicit marketplace. The action targeted tools and infrastructure sold for large-scale campaigns.
Microsoft patched CVE-2026-100220 on Oct 13, a Critical remote code execution flaw in the Windows Media Video Decoder (CVSS 3.1: 8.8). A heap-based buffer overflow is triggered when a user opens a crafted media file. It is not exploited or publicly disclosed. Fixes include KB5127648, KB5126653 and KB5126657.
Microsoft confirmed Remote Desktop connections fail with error 0xC000000D after the KB5124010 update or later on Windows 11 24H2 and newer when Administrator protection is enabled. The issue hits enterprise devices using the feature by default in security baselines, with a policy workaround available until a fix ships.
Dockhand before version 1.0.50 has a privilege escalation flaw, CVE-2026-110112, that lets admins from another tenant of a shared OIDC provider such as Microsoft Entra ID gain admin access, because the iss, aud, nonce and exp claims are not validated. VulnCheck, the CNA, rates it 8.1 under CVSS 3.1 and 9.2 under CVSS 4.0.
Microsoft's tenth Patch Tuesday release of 2026 arrives as KB5127648 and KB5126653 for Windows 11 23H2 through 26H2. The updates patch hundreds of vulnerabilities while adding Emoji 17.0 support, File Explorer preview and thumbnail fixes, a Tips widget, and Bluetooth stability improvements.
Microsoft 365 Copilot Retrieval API for SharePoint Embedded now lets developers retrieve permission-trimmed passages from enterprise content for custom agents without building a vector database or indexing pipeline. The SharePoint Embedded MCP server also entered public preview for natural-language app provisioning.
2,899 euros gets the Microsoft Surface Laptop Ultra with Nvidia RTX Spark N1X on pre-order at Fnac, shipping from October 31.
Microsoft traced the Exchange Admin Center outage to a configuration change. Rollback restored access.
Norway fined Microsoft subsidiary Xandr $9.6 million for allegedly misusing Grindr user data. The company has three weeks to appeal the penalty.
Microsoft's in-house Azure Maia chips will become the main platform for its own AI services, including Microsoft 365 Copilot, GitHub Copilot and Microsoft Foundry, DIGITIMES reports.
Microsoft reportedly patched the "Learn More" shortcut that let users skip the Windows 11 online account requirement during setup. The server-side change forces users to seek more involved workarounds.
96 accelerators per rack in Microsoft's third-generation Maia 300, paired with HBM4 and mostly liquid-cooled infrastructure. The design supports superpods of up to 12,288 accelerators for cloud-scale agentic inference.
Microsoft's third-gen Maia 300 AI chip targets production rollout in 2027 as the primary inference system for its cloud services.
Microsoft plans to shift the bulk of its AI inference workload onto its own Maia chips. The move is expected to cut reliance on Nvidia GPUs and lift operating margins.
Microsoft's Maia 300 accelerator delivers 40% more inference tokens per megawatt than leading GPU systems. It also reaches up to 7x the rack-scale token throughput of Maia 200.
Microsoft is adding Copilot support to Word, Excel, and PowerPoint while removing the ability to generate Outlook themes with the same tool.
Microsoft says Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions lose security updates in 30 days.
Microsoft will renew Windows Update certificates in spring 2027, cutting off updates and security patches for any PC that misses the change.
Microsoft president Brad Smith said AI faces less oversight than a carton of milk despite its potential to hack governments and corporations.
Microsoft is pushing for AI systems that organizations can monitor in real time and shut down in an emergency rather than opaque black boxes. The call targets enterprise deployments where models connect to business data and tools.
Microsoft's Decision-1 opens with Qwen3.5-9B from a Chinese lab. The next iteration will switch to Redmond's own model.
Up to 4TB of OneDrive storage is being cut from Microsoft 365 subscriptions. The change reverses earlier storage increases for affected plans.
Microsoft is building AI agents into Windows 11 instead of advancing to a new major version. The company laid out the shift at its Surface event this week, treating the current OS as the foundation for an agentic system.
GitHub is roughly 60% through its migration to Azure, working through capacity problems and outages as the platform slots into Microsoft's AI agent strategy.
Microsoft is reportedly barred from sponsoring foreign workers for US residency after the government accused it of abusing immigration rules, a claim the company disputes.
Up to five additional users on Microsoft 365 Family plans will share Copilot and AI features alongside Office apps and OneDrive storage. The change also applies to Premium subscribers.
Indian tech giants are reportedly shrugging off revisions to the US skilled visa program. Microsoft has denied the fraud and abuse allegations that prompted the changes.
US government accused Microsoft of replacing American workers with foreign indentured servants, then awarded Satya Nadella a medal.
Microsoft advises organizations to begin testing certificate ecosystems now ahead of post-quantum authentication. Its PQC TLS Pilot Program is intended to support that preparation.
Microsoft has started testing a redesigned Windows Search built on WinUI 3. "This new Windows Search experience is built for speed," says corporate vice president Anshul Rawat.
Nscale doubled its Bellevue engineering hub lease to 46,000 square feet before the space opens in 2027. The expansion follows a $2B funding round and targets a hiring push led by former Microsoft AI executive Nidhi Chappell.