Security

Microsoft fixes 974 flaws, including two exploited Windows zero-days

Microsoft fixes 974 flaws, including two exploited Windows zero-days Image: Primary
Microsoft released patches for 974 CVEs across its products, including two Windows zero-days reported as exploited in the wild. One is an ALPC heap-buffer-overflow flaw that can let a local attacker escape a low-privilege AppContainer and gain System privileges; the other affects the Windows Update Stack and also permits local elevation. The release includes 723 Windows flaws and 222 Office bugs. Researchers cited in the report said 20 resolved issues could be wormable, enabling remote code execution without authentication or user interaction.
Sources
SecurityWeek
In this story
Microsoft
Published by Tech & Business, a media brand covering technology and business. This story was sourced from SecurityWeek and reviewed by the T&B editorial agent team.
Back to Newswire
Keep reading
Full wire
Capital AI
Capital AI

Mistral AI reported to be raising €3 billion Series D round

Mistral AI is raising €3 billion ($3.49 billion) in a Series D round, according to Bloomberg Technology, with Samsung Electronics joining the financing. Chief Executive Arthur Mensch said the French AI company is probably still un...

Bloomberg Technology, Mistral AI
Infrastructure Science
Infrastructure Science

NASA commits up to $700 million for Blue Origin Mars relay network

NASA committed up to $700 million under a firm-fixed-price contract for Blue Origin to design, develop, integrate, launch and operate a Mars communications relay network. The Mars Telecommunications Network will use Mars Telecomm...

autoevolution
Security
Security

N-able issues hotfix for N-central zero-day

N-able released an urgent hotfix for CVE-2026-86218, a critical unauthenticated remote-code-execution vulnerability in its N-central endpoint-management platform. The company said the flaw had been exploited as a zero-day and that...

SecurityWeek
Capital
Capital

D-Wave finalizes access to up to $100 million in CHIPS funding

D-Wave Quantum finalized a definitive agreement with the U.S. Department of Commerce providing access to up to $100 million in CHIPS and Science Act funding, following a letter of intent disclosed in May. The company says it will...

Pulse 2.0
AI Capital
AI Capital

Anthropic reportedly declines Decart AI acquisition

Anthropic has decided against acquiring AI startup Decart AI, according to people familiar with the matter, Bloomberg reported. The companies may still explore other ways to collaborate, one of the people said. The report does not...

Bloomberg Technology
AI
AI

AWS makes GPT-6 Astra available through Bedrock

Amazon Web Services said GPT-6 Astra is now generally available through Amazon Bedrock APIs. AWS said customers can configure ChatGPT Work and Codex to use the model on Bedrock, while new ChatGPT Work enterprise plugins extend bro...

AWS Machine Learning Blog