NewApp Digest
search bot

urgency

Microsoft patches 966 vulnerabilities: Two Windows zero-days actively exploited
Winsage
September 10, 2026

Microsoft patches 966 vulnerabilities: Two Windows zero-days actively exploited

On September 8, 2026, Microsoft released 966 security updates, the largest Patch Tuesday to date, addressing various vulnerabilities. Among these, 105 were classified as critical, including two zero-day vulnerabilities: CVE-2026-81963 and CVE-2026-85880. Both allow authorized local attackers to escalate privileges to SYSTEM level. CVE-2026-81963 is related to the Windows Update Stack, while CVE-2026-85880 involves a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC). The updates included 438 vulnerabilities related to privilege escalation, 258 concerning remote code execution, and 173 involving information disclosures. Users are advised to prioritize the installation of these updates due to the potential exploitation of the two critical vulnerabilities.
CVE-2026-85880 and CVE-2026-81963: Microsoft Patches Two Actively Exploited Windows Zero-Days
Winsage
September 10, 2026

CVE-2026-85880 and CVE-2026-81963: Microsoft Patches Two Actively Exploited Windows Zero-Days

Microsoft's Patch Tuesday on September 8, 2026, addressed two critical Windows privilege escalation vulnerabilities: CVE-2026-85880 and CVE-2026-81963, both with a CVSS score of 7.8. CVE-2026-85880 is a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC), allowing attackers with low-privilege local access to escalate privileges to SYSTEM. CVE-2026-81963 involves improper link resolution in the Windows Update Stack, enabling similar privilege escalation. Both vulnerabilities require no user interaction and have been actively exploited prior to the patch release. CISA added them to its Known Exploited Vulnerabilities catalog on September 8, 2026, with a remediation deadline of September 22 for U.S. federal agencies. CVE-2026-85880 affects various Windows 10 and Server versions but excludes Windows 11 and Windows Server 2025. CVE-2026-81963 impacts newer Windows platforms, including Windows 11 and Windows Server 2025. Microsoft released security updates for both vulnerabilities on September 8, 2026, and organizations are advised to prioritize these updates. Security teams should monitor for signs of privilege escalation and unusual SYSTEM-level activities related to these vulnerabilities.
Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days
Winsage
September 9, 2026

Microsoft Patches Record 974 Flaws, Including Two Exploited Windows Zero-Days

Microsoft addressed 974 vulnerabilities in its software suite during its recent Patch Tuesday, marking a record high. The breakdown includes 723 flaws in Windows, 111 in Office, 62 in SQL, and 22 in Developer Tools, with over 110 rated as critical. Two actively exploited vulnerabilities are CVE-2026-85880 and CVE-2026-81963, both allowing local privilege elevation. Other notable vulnerabilities include CVE-2026-55007 (8.1), CVE-2026-80097 (8.6), CVE-2026-69465 (8.8), and several with CVSS scores of 9.6 and above. Microsoft has patched a total of 2,760 security flaws this year, reflecting a trend of increasing vulnerability discoveries. Despite the extensive patching, no significant spike in active exploits has been observed.
Patch Tuesday is here — Windows 11 is expected to set yet another record for security updates in a month
Winsage
September 8, 2026

Patch Tuesday is here — Windows 11 is expected to set yet another record for security updates in a month

Windows 11's latest Patch Tuesday delivered over 650 security fixes, a six-fold increase compared to typical monthly updates. This surge is linked to advancements in artificial intelligence, which have accelerated vulnerability discovery and the urgency to address them. AI aids Microsoft's engineers in the patching process but is also exploited by malicious actors, creating an ongoing cybersecurity arms race.
Connecticut attorney general calls Kik messenger app a ‘predator’s paradise’
AppWizard
September 8, 2026

Connecticut attorney general calls Kik messenger app a ‘predator’s paradise’

Connecticut's Attorney General, William Tong, is investigating MediaLab.AI Inc.'s messaging app, Kik, due to concerns about inadequate age assurance practices and content moderation. Child safety advocates have criticized Kik as a “predator’s paradise.” Tong described Kik as a platform with significant issues related to sexual abuse, exploitation, and bullying, lacking meaningful age verification and protections for users. The app has over one-third of American teens using it, down from 40 percent in 2016. MediaLab has only partially responded to inquiries about privacy and safety. Tong's office has issued a civil investigative demand for information on MediaLab’s data processing, content moderation, and age assurance practices to assess compliance with the Connecticut Data Privacy Act and the Connecticut Unfair Trade Practices Act.
Google Photos just halved the time you have to rescue trashed pictures
AppWizard
September 7, 2026

Google Photos just halved the time you have to rescue trashed pictures

Google Photos has changed its photo retention policy, reducing the grace period for restoring deleted images from 60 days to 30 days. This update aligns the retention period for deleted cloud images with that of locally stored photos. Notifications about this policy change are being sent to Android users, marking its official rollout.
Microsoft announces cap on Xbox Cloud Gaming hours for Game Pass subscribers, admits most aren't using it much anyway
AppWizard
September 3, 2026

Microsoft announces cap on Xbox Cloud Gaming hours for Game Pass subscribers, admits most aren’t using it much anyway

Microsoft's gaming division is facing challenges due to layoffs, industry consolidation issues, and controversial partnerships. Xbox is increasing service costs for its cloud gaming service, introducing a monthly cap for Game Pass subscribers starting in November, after which additional playtime must be purchased. This change follows a decline in Xbox revenue, which fell by .7 billion over the past year. Xbox also tested an ad-supported game streaming model to boost revenue. The effectiveness of the new pricing strategy is uncertain, especially after a previous price hike led to a loss of "millions" of Game Pass subscribers. Xbox plans to engage with its player base for feedback on these changes.
Why governments worldwide are abandoning Windows for homegrown Linux alternatives
Winsage
September 1, 2026

Why governments worldwide are abandoning Windows for homegrown Linux alternatives

Windows is the most widely used desktop operating system, but Linux is gaining popularity among government entities globally, driven by a desire for independence from Western software due to geopolitical tensions. France plans to transition government workstations from Windows to Linux as part of a broader European movement for digital sovereignty, with the national police force having migrated 97% of its computers to a customized version of Ubuntu called GendBuntu. Germany is also adopting Linux, with Munich creating a customized distribution called LiMuX and other states like Mecklenburg-Vorpommern shifting to open-source platforms like Nextcloud. In Russia, the government is deploying Astra Linux to reduce reliance on Microsoft products following the Ukraine conflict. China is promoting Kylin OS, a Linux-based system, to achieve software self-sufficiency after the end of support for Windows 10. Governments are increasingly turning to Linux to diminish dependence on American technology and foster digital autonomy.
Search