NewApp Digest
search bot

SharePoint

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Winsage
September 9, 2026

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft addressed 974 vulnerabilities in its software suite during its recent Patch Tuesday, marking a record high. The breakdown includes 723 flaws in Windows, 111 in Office, 62 in SQL, and 22 in Developer Tools, with over 110 rated as critical. Two actively exploited vulnerabilities are CVE-2026-85880 and CVE-2026-81963, both allowing local privilege elevation. Other notable vulnerabilities include CVE-2026-55007 (8.1), CVE-2026-80097 (8.6), CVE-2026-69465 (8.8), and several with CVSS scores of 9.6 and above. Microsoft has patched a total of 2,760 security flaws this year, reflecting a trend of increasing vulnerability discoveries. Despite the extensive patching, no significant spike in active exploits has been observed.
Microsoft releases Windows security update addressing 723 flaws
Winsage
September 8, 2026

Microsoft releases Windows security update addressing 723 flaws

Microsoft released its September 2026 security updates, addressing two critical Windows elevation-of-privilege vulnerabilities: CVE-2026-85880 and CVE-2026-81963. Both vulnerabilities were exploited before their public disclosure on September 8. CVE-2026-85880 involves a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC), allowing low-privileged attackers to gain SYSTEM privileges. CVE-2026-81963 affects the Windows Update Stack due to improper link resolution and access controls, enabling similar privilege escalation. The September release also includes 974 Common Vulnerabilities and Exposures (CVEs) across various Microsoft products, with 723 affecting Windows. Users of Windows 11 24H2 and 25H2 receive updates via KB5124008, while Windows 11 26H1 receives KB5124012. Windows 11 24H2 Home or Pro editions will reach end of servicing on October 13, 2026. Users are advised to install the updates promptly and back up important data.
Excel keeps people on Windows, and a Linux distro creator wants Microsoft to end that
Winsage
September 7, 2026

Excel keeps people on Windows, and a Linux distro creator wants Microsoft to end that

Omarchy is a Linux distribution created by David Heinemeier Hansson (DHH), designed for developers and creators, based on Arch Linux. DHH has challenged Microsoft to develop native Office applications for Linux, highlighting that while Microsoft 365's web version is available, Linux users only access about 90% of the functionality compared to Windows users. Microsoft’s revenue from Windows has decreased by 7% year-over-year, while Microsoft 365 Commercial cloud revenue has grown by 14%, and Azure by 43%. Windows now accounts for only 5% of Microsoft's total revenue, indicating a shift towards cloud services. Microsoft has launched Edge for Linux and supports tools like VS Code and PowerShell on the platform. The web version of Office lacks features found in the desktop version, affecting usability for professionals. Despite Linux's growing interest, particularly through the Windows Subsystem for Linux (WSL), it may not be enough to prompt Microsoft to prioritize a native Office port. DHH's Omarchy aims to create a user-friendly Linux experience rather than convert Windows users.
Why governments worldwide are abandoning Windows for homegrown Linux alternatives
Winsage
September 1, 2026

Why governments worldwide are abandoning Windows for homegrown Linux alternatives

Windows is the most widely used desktop operating system, but Linux is gaining popularity among government entities globally, driven by a desire for independence from Western software due to geopolitical tensions. France plans to transition government workstations from Windows to Linux as part of a broader European movement for digital sovereignty, with the national police force having migrated 97% of its computers to a customized version of Ubuntu called GendBuntu. Germany is also adopting Linux, with Munich creating a customized distribution called LiMuX and other states like Mecklenburg-Vorpommern shifting to open-source platforms like Nextcloud. In Russia, the government is deploying Astra Linux to reduce reliance on Microsoft products following the Ukraine conflict. China is promoting Kylin OS, a Linux-based system, to achieve software self-sufficiency after the end of support for Windows 10. Governments are increasingly turning to Linux to diminish dependence on American technology and foster digital autonomy.
Microsoft's leaked new OS is one you'll hope stays buried, and it's not Windows
Winsage
August 25, 2026

Microsoft’s leaked new OS is one you’ll hope stays buried, and it’s not Windows

Leaked documents reveal that Microsoft developed Project Aion, a Copilot-centric operating system distinct from Windows 11, which was never released. Aion was designed without a Start menu, desktop icons, or a traditional taskbar, placing Copilot at the center of user interaction. The project was conceived as early as 2024 and aimed to redefine user engagement with technology, focusing on education, entertainment, and task completion. It utilized a streamlined Windows codebase called Win3, which was lighter than Windows 11 but lacked support for legacy Win32 apps. Aion featured a personalized dashboard with task cards and app icons for both Microsoft and third-party applications. It was intended to run on various AI-focused devices and aimed to create a versatile operating system adaptable to different hardware configurations. Key features included a conversational user experience, an "Ask me anything" box for queries, and "Spaces" for project organization. Despite its innovative design, Aion was primarily aimed at enterprise use and faced limitations due to the absence of traditional desktop applications. The likelihood of Aion's release is slim as Microsoft has shifted its focus to refining Windows 11 and has begun retracting ambitious AI integrations, prioritizing stability and performance enhancements over new operating systems.
That April Windows update you skipped? Hackers are exploiting it now
Winsage
August 21, 2026

That April Windows update you skipped? Hackers are exploiting it now

Timely updates are crucial for home users to protect personal data and device integrity. Organizations should assess systems for vulnerabilities, especially those accessible via the internet. CVE-2026-33824 is a critical vulnerability in the Internet Key Exchange (IKE) service extensions within Windows, caused by a “double-free” error, allowing code execution. It affects various versions of Windows 10, Windows 11, and Windows Server, and is included in the CISA KEV catalog. Users are urged to install the April Windows updates immediately. CVE-2026-55040 is a critical vulnerability in Microsoft SharePoint that allows unauthenticated attackers to bypass a key security feature, with a CVSS score of 9.1. It affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and the Subscription Edition, with fixed builds already available.
CISA: Windows Task Host flaw now exploited by ransomware gangs
Winsage
August 18, 2026

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that ransomware gangs are exploiting a significant vulnerability in the Windows Task Host system, tracked as CVE-2025-60710. This high-severity flaw, affecting Windows 11 and Windows Server 2025, allows local attackers with basic user permissions to escalate their privileges to SYSTEM level. Microsoft patched this vulnerability in November 2025, but it poses a threat to unpatched devices. CISA added CVE-2025-60710 to its list of actively exploited vulnerabilities on April 13 and provided Federal Civilian Executive Branch agencies with a two-week window to secure their systems. CISA warns that such vulnerabilities are frequent attack vectors for malicious actors and urges organizations to apply mitigations or discontinue the use of affected products. Additionally, CISA noted that ransomware groups are also exploiting a Microsoft SharePoint remote code execution vulnerability (CVE-2026-45659), confirmed to be actively exploited in early July. Since November 2021, CISA has identified 383 actively exploited vulnerabilities across various Microsoft products, with 112 being used in ransomware attacks.
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’
Winsage
August 13, 2026

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

Security researcher Nightmare Eclipse has released a zero-day exploit named ShieldBreak that allows privilege escalation on Windows by targeting a vulnerability in Microsoft Defender. This exploit, designated as CVE-2026-50656, is categorized as a race condition vulnerability and affects the latest versions of Windows 11 and Windows Server 2025, with potential impacts on Windows 10. The exploit was disclosed on June 9, 2026, and Microsoft acknowledged the issue on June 16, rolling out fixes by July 9. The mechanics of ShieldBreak involve manipulating Defender’s scan path and executing a scheduled task to gain System-level privileges. Experts have noted differences between ShieldBreak and the previously known RoguePlanet exploit, emphasizing that ShieldBreak requires Defender to be active to function.
Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday
Winsage
August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.
Search