Search
Articles · 7

Microsoft discloses high-severity ASP.NET Core DoS flaw CVE-2026-109468
Microsoft disclosed CVE-2026-109468, a 7.5 ASP.NET Core denial-of-service flaw affecting Visual Studio 2022 before 17.14.42, Visual Studio 2026 before 18.10.4, and System.Formats.Cbor before 10.0.13.

Microsoft SharePoint Server Subscription Edition hit by CVE-2026-108452
Microsoft disclosed CVE-2026-108452, an 8.8 path traversal RCE in SharePoint Server Subscription Edition before 16.0.20326.20190. KB5002927 fixes it; an authenticated Site Owner can exploit it over the network.

Windows 11 Photos app adds unified Gallery and faster Editor
Microsoft announced a new Photos app for Windows 11 with a unified Gallery, a faster Editor and a redesigned Viewer, rolling out to Insiders starting today. The update combines local, OneDrive and iCloud photos; the Editor launches 25 percent faster and the Viewer starts 15 percent faster on average, up to 30 percent for HEIC images.

Microsoft fixes 10 VS Code flaws in 1.141.1, led by a 9.6 remote code execution bug
Microsoft's October security release lists 10 Visual Studio Code vulnerabilities, all rated Important, led by a 9.6 remote code execution bug. None are exploited or publicly disclosed. Users should update to VS Code 1.141.1.

Microsoft October 2026 Patch Tuesday Fixes 1,411 Flaws, Including Three Zero-Days, One Actively Exploited
Microsoft's October 2026 Patch Tuesday fixes a record 1,411 flaws, according to BleepingComputer, including 70 rated Critical and three zero-days. One, a Windows Shell security feature bypass tracked as CVE-2026-96951, is under active attack, and CISA has ordered federal agencies to patch it by October 16.

Microsoft patches four critical flaws in 365 Apps For Enterprise
Microsoft has published details on four critical vulnerabilities affecting Microsoft 365 Apps For Enterprise and related Office products. All four flaws carry CVSS scores of 9.8 and allow remote code execution over a network.

Microsoft to scale Azure Maia chips to multi-gigawatt deployments from 2027
Microsoft will scale its Azure Maia accelerators to multi-gigawatt deployments starting in 2027, making Maia its primary inference system. Maia 200 is in production now, and Microsoft expects Maia 300 to deliver 40% more tokens per megawatt than leading GPU systems.
From the feed · 38
Exchange admins spent their weekend on registry fixes after October Windows Server updates set a 512 simultaneous Endpoint Lookup call limit that destabilized OWA and email queues on busy 2016-2025 servers. Microsoft says not all systems are affected equally and is investigating.
Microsoft fixed a bug in classic Outlook that hid Copilot buttons from licensed users. The client had stopped retrieving required account details from the Outlook profile.
£270 million ValueLicensing claim against Microsoft advances after the Court of Appeal refused permission to take the second-hand license dispute to the Supreme Court. A 2013 internal deck labeled a Known Adverse Document remains undisclosed.
Eight games are leaving Xbox Game Pass in late October 2026. Microsoft flagged the departures on the Xbox app, with LEGO Star Wars: The Skywalker Saga and Deep Rock Galactic among them.
RTX Spark laptops starting at $2,399 are now available with NVIDIA Blackwell RTX graphics. • Up to 128GB unified memory • Up to 1 petaflop of AI compute • Systems from ASUS, Dell, HP, Lenovo, Microsoft and MSI
After a 22-year run as an independent company, Inrix is selling substantially all of its assets to Allstate’s Arity. The former Microsoft spinout had explored an IPO multiple times.
Michelangelus, a typeface drawn from Michelangelo's Vatican manuscripts and Pietà inscriptions, joins Microsoft 365 with over 500 glyphs across regular, italic, bold, and bold italic styles.
Microsoft announced a whitepaper with NVIDIA that gives enterprises a shared taxonomy, evaluations, and controls for open-weight AI model risks.
Microsoft Signal magazine Issue 6 examines AI race-day decisions at the F1 Miami Grand Prix and early wildfire detection on California's front lines.
Project Odeon, a test Settings app, has appeared in the Microsoft Store for Windows 11 build 26100 and newer. The modular build could allow Store-based updates and pull more Control Panel functions into one place.
Apple and Nvidia each pledged $25 million toward President Trump’s White House ballroom, making them two of the largest donors on an internal list obtained by The Washington Post, 9to5Mac reports. Other tech pledges on the list include $22 million from Google and $10 million each from Microsoft and Palantir.
Theo Browne says a ~$24,000 Claude Opus 5.5 run ported Microsoft’s Go-based TypeScript 7 compiler to Rust, and claims the port runs about twice as fast as tsc 7 and 12.5 times as fast as v6 while passing nearly all conformance tests, The Register reports.
Three Seattle-area startups made Time's Best Inventions list this year. OneCourt, Yoodli and Tin Can joined Amazon and SpaceX, while Microsoft was left off.
Microsoft Edge announced a seamless-updates prototype that applies new versions in the background while open tabs and work continue without a restart. Restart to update on idle is available now for idle devices, and Security Update Alerts are live in the Edge management service for organizations.
Nvidia, Apple, Google, Microsoft, Amazon, and Meta gave a combined $92 million for Trump’s White House ballroom, according to a Washington Post donor list cited by The Verge. Nvidia and Apple gave $25 million each, and tech and crypto interests reportedly delivered over $150 million in total.
Microsoft says RTX Spark laptops get a new Get Started setup that installs an AI agent in about two clicks, with agents installed and updated through the Windows Store. Hermes, Perplexity, and OpenClaw are the first three supported agents at launch, and Microsoft’s Surface Laptop Ultra can ship with up to 128GB of unified memory.
House House skipped Xbox for Big Walk to follow the BDS boycott of Microsoft over its Israel contracts. The studio said it would not release there until the company is removed as a target, noting the choice runs counter to its goal of group play but reflects a belief that collective action can drive change.
Microsoft fixed the black screen, desktop loading, and Explorer crash issue that followed Windows 11 updates since August. The fix shipped in the October 13 cumulative updates and applies mainly to Azure Virtual Desktop hosts running FSLogix.
Free fiber subscribers report 40-140 Mb/s on 8 Gbit/s FTTH lines, with high latency to Google and Microsoft servers. Issues center on the backbone and affect Île-de-France plus scattered reports elsewhere.
Python 3.15 selects the native Arm64 runtime by default on Windows on Arm devices, Microsoft says, with NumPy, pandas, Django and more than 2,500 Anaconda packages available natively.
$49.99 Xbox Nano controller measures just over five inches, Microsoft's smallest yet with full button layout, Xbox Wireless and Bluetooth, rechargeable battery, and programmable Action Button.
Microsoft's new bias-correction tool improved the accuracy of ECMWF's leading physics-based weather model for 98 percent of precipitation targets and 92 percent of temperature targets two to six weeks ahead, and doubled the accuracy of ECMWF's new AI forecasting system in the study. Microsoft says it runs on CPUs alone, The Verge reports.
Microsoft's October Patch Tuesday update fixes a Windows 11 bug that caused mouse stuttering during gameplay. The one-line note in KB5127648 covers the issue without naming affected titles or root cause.
Tiny11 Builder's new WinUI 3 desktop app creates debloated Windows 11 ISOs from 22H2 media onward without PowerShell. Three modes range from keeping Defender and updates to irreversible Core cuts that drop recovery tools and Microsoft support.
Microsoft released KB5127648 and KB5127646 to fix Always On VPN failures on Windows 11 24H2 and later. The updates resolve stuck connections and port-in-use errors that followed September security patches when automatic protocol selection was enabled.
Microsoft's Digital Crimes Unit disrupted a Chinese-language phishing ecosystem linking kit operators tracked as Storm-2990 with the Storm-3119 illicit marketplace. The action targeted tools and infrastructure sold for large-scale campaigns.
Microsoft's stock hit a record close of $543.45 on Tuesday, giving it a market value just above $4 trillion, up about $1.4 trillion since June 25. The rebound accelerated in late July after Azure grew 43% and topped $100 billion in annual revenue, GeekWire reports.
Microsoft patched CVE-2026-100220 on Oct 13, a Critical remote code execution flaw in the Windows Media Video Decoder (CVSS 3.1: 8.8). A heap-based buffer overflow is triggered when a user opens a crafted media file. It is not exploited or publicly disclosed. Fixes include KB5127648, KB5126653 and KB5126657.
Microsoft confirmed Remote Desktop connections fail with error 0xC000000D after the KB5124010 update or later on Windows 11 24H2 and newer when Administrator protection is enabled. The issue hits enterprise devices using the feature by default in security baselines, with a policy workaround available until a fix ships.
Dockhand before version 1.0.50 has a privilege escalation flaw, CVE-2026-110112, that lets admins from another tenant of a shared OIDC provider such as Microsoft Entra ID gain admin access, because the iss, aud, nonce and exp claims are not validated. VulnCheck, the CNA, rates it 8.1 under CVSS 3.1 and 9.2 under CVSS 4.0.
Xbox boss Asha Sharma has formed Xbox Labs inside Microsoft to test how new technologies can produce fresh player experiences. The unit will examine trends such as rapid game decompilation and cross-title remixing.
Microsoft's tenth Patch Tuesday release of 2026 arrives as KB5127648 and KB5126653 for Windows 11 23H2 through 26H2. The updates patch hundreds of vulnerabilities while adding Emoji 17.0 support, File Explorer preview and thumbnail fixes, a Tips widget, and Bluetooth stability improvements.
Microsoft 365 Copilot Retrieval API for SharePoint Embedded now lets developers retrieve permission-trimmed passages from enterprise content for custom agents without building a vector database or indexing pipeline. The SharePoint Embedded MCP server also entered public preview for natural-language app provisioning.
2,899 euros gets the Microsoft Surface Laptop Ultra with Nvidia RTX Spark N1X on pre-order at Fnac, shipping from October 31.
Microsoft traced the Exchange Admin Center outage to a configuration change. Rollback restored access.
Norway fined Microsoft subsidiary Xandr $9.6 million for allegedly misusing Grindr user data. The company has three weeks to appeal the penalty.
Microsoft's in-house Azure Maia chips will become the main platform for its own AI services, including Microsoft 365 Copilot, GitHub Copilot and Microsoft Foundry, DIGITIMES reports.
Microsoft reportedly patched the "Learn More" shortcut that let users skip the Windows 11 online account requirement during setup. The server-side change forces users to seek more involved workarounds.