The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Security news · Cisco Talos Intelligence
Weekly briefing
Week 42 · 12 Oct – 18 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
2989 source records · 557 groupsSecurityCisco
Cisco Meraki Security Hardening Release: October 2026
Security news · Cisco security advisories
SecurityGoogle Chrome
Chrome 155.0.8059.84: 10 security fixes (1 critical, 6 high, 3 medium)
Security advisory · Chrome security releases (Google)
SecurityMicrosoft Edge
Edge 155.0.4283.60: Chromium security fixes
Security advisory · Microsoft Edge security release notes
SecurityPalo Alto Networks4 source records
Security news · 4 entries
- CVE-2026-0317 PAN-OS: Denial of Service Vulnerability (Severity: LOW)
Security news · Palo Alto Networks security advisories
- CVE-2026-0320 PAN-OS: Authenticated Admin Command Injection Vulnerability (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
- CVE-2026-0321 PAN-OS: Denial of Service (DoS) Vulnerabilities in Network Services (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
Show the other 1 entries
- CVE-2026-0322 PAN-OS: Authenticated Remote Code Execution (RCE) in the Management Interface (Severity: HIGH)
Security news · Palo Alto Networks security advisories
SecurityCisco3 source records
Cisco · exploited, added to CISA KEV · 3 entries
- Cisco Secure Email Gateway Relative Path Traversal Vulnerability
Cisco · exploited, added to CISA KEV
CVE-2026-76519
Assessment context
CISA lists it as exploited
- Cisco Secure Email Gateway Arbitrary File Write Vulnerability
Security news · Cisco security advisories
- Cisco Secure Email Gateway and Secure Email and Web Manager Security Hardening Release: September 2026
Security news · Cisco security advisories
SecurityPalo Alto Networks10 source records
Palo Alto Networks · exploited, added to CISA KEV · 10 entries
- Palo Alto Networks PAN-OS Code Injection Vulnerability
Palo Alto Networks · exploited, added to CISA KEV
CVE-2026-0322
Assessment context
CISA lists it as exploited
- CVE-2026-0311 Checkov by Prisma Cloud: Server-Side Request Forgery Vulnerability (Severity: LOW)
Security news · Palo Alto Networks security advisories
- CVE-2026-0312 Checkov by Prisma Cloud: Path Traversal Vulnerabilities (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
Show the other 7 entries
- CVE-2026-0313 Cortex XSOAR: OS Command Injection Vulnerability (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
- CVE-2026-0314 GlobalProtect App: Local Denial of Service (DoS) on Windows (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
- CVE-2026-0315 GlobalProtect App: Local Privilege Escalation Vulnerability on macOS (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
- CVE-2026-0316 PAN-OS: Stored Cross-Site Scripting (XSS) Vulnerability (Severity: LOW)
Security news · Palo Alto Networks security advisories
- CVE-2026-0318 PAN-OS: Denial of Service (DoS) on Panorama (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
- CVE-2026-0319 PAN-OS: Improper Input Handling Vulnerability (Severity: MEDIUM)
Security news · Palo Alto Networks security advisories
- PAN-SA-2026-0013 Chromium: Monthly Vulnerability Update (October 2026) (Severity: HIGH)
Security news · Palo Alto Networks security advisories
Known issuesAzure
Post Incident Review (PIR) – Azure OpenAI Service, Foundry Agent Service, Foundry Models, and Azure AI services – Intermittent request failures and latency in Sweden Central
Revised by Microsoft · Azure public incident reviews
Assessment context
Changed after ChangeIntel first saw it
Updates and guidanceAmazon Web Services: 8 lists changed
Amazon Web Services: 8 lists changed
IP ranges changed
8 lists changed: 4 cover more addresses, 4 no longer cover some addresses.
Assessment context
8 lists changed: 4 cover more addresses, 4 no longer cover some addresses.
Updates and guidanceZscaler: 2 lists changed
Zscaler: 2 lists changed
IP ranges changed
2 lists changed: 2 cover more addresses.
Assessment context
2 lists changed: 2 cover more addresses.
RoadmapMicrosoft 365 Copilot6 source records
Date moved later · 6 entries
- Microsoft Edge: Upgraded Copilot new tab page
Date moved later
General availability: October CY2026 → November CY2026
Assessment context
Target moved from October CY2026 to November CY2026
- Microsoft Purview compliance portal: Data Lifecycle Management - Retention based on Last Accessed for files in OneDrive and SharePoint
Date moved later
General availability: January CY2027 → February CY2027
Assessment context
Target moved from January CY2027 to February CY2027
- Microsoft Purview compliance portal: Data Lifecycle Management - Retention based on Last Accessed for files in OneDrive and SharePoint
Preview · Date moved later
Preview: November CY2026 → January CY2027
Assessment context
Target moved from November CY2026 to January CY2027
Show the other 3 entries
- Microsoft Copilot (Microsoft 365): Copilot response personalization - Memory citations
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Copilot (Microsoft 365): Expanded Agent Support in Copilot Notebooks
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Copilot (Microsoft 365): User can use Hubspot Connector in Researcher
Launched
Status: InDevelopment → Launched
RoadmapPurview5 source records
Date moved later · 5 entries
- Microsoft Purview: Endpoint Data Loss Prevention - Policy Sync & Device Health AI-Powered Investigation
Date moved later
General availability: October CY2026 → November CY2026
Assessment context
Target moved from October CY2026 to November CY2026
- Microsoft Purview: Information Protection - Rights Management connector – Certificate-based authentication
Preview · Date moved later
Preview: July CY2026 → October CY2026
Assessment context
Target moved from July CY2026 to October CY2026
- Microsoft Purview: Information Protection- File Labeler and File Viewer for MacOS
Date moved later
General availability: November CY2026 → January CY2027
Assessment context
Target moved from November CY2026 to January CY2027
Show the other 2 entries
- Microsoft Purview: Adaptive Scope evaluation control with recipient and site owner lifecycle status
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Purview: Data Loss Prevention – New Guided Experience to Diagnose and Resolve DLP Issues
Roadmap entry · Microsoft 365 Roadmap
RoadmapTeams10 source records
Now rolling out · 10 entries
- Microsoft Teams: Intelligent meeting recap available without saving transcript
Now rolling out
Status: InDevelopment → RollingOut
Assessment context
The feature started reaching tenants
- Microsoft Teams: See more messages on mobile
Date moved later
General availability: November CY2026 → December CY2026
Assessment context
Target moved from November CY2026 to December CY2026
- Microsoft Teams: Add multiple steps when building a workflow from scratch
Launched
Status: RollingOut → Launched
Show the other 7 entries
- Microsoft Teams: Co-organizer updates in Webinars
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Teams: Events in Meet app in Teams in GCC
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Teams: Express face enrollment
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Teams: Organization Evaluation Score for Apps and Agents
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Teams: Phishing Detection in Teams Messaging
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Teams: Pop out calls into a new browser window
Roadmap entry · Microsoft 365 Roadmap
- Microsoft Teams: PowerPoint Live support for webinars and structured meetings on Teams Rooms on Android
Roadmap entry · Microsoft 365 Roadmap
CommunityAskWoody
The stats for October
Community post · AskWoody
CommunityOffice 365 for IT Pros (Tony Redmond)
Tracking File-Level Archiving Activity in SharePoint Online with PowerShell
Community post · Office 365 for IT Pros (Tony Redmond)
CommunityPatch My PC Blog
Patch My PC Publisher Production Version 3.1.10.0 Released
Community post · Patch My PC Blog
CommunityPetri IT Knowledgebase2 source records
Community post · 2 entries
- Microsoft Fixes 80 Critical Flaws in October 2026 Patch Tuesday Updates
Community post · Petri IT Knowledgebase
- Research Shows Vulnerability in Microsoft VBS Enclave Component
Community post · Petri IT Knowledgebase
DatesAzure
Retirement Update: SAP container images removed October 14, 2026
Announced retirement
DatesWindows
NTLMv1 SSO enforcement phases
Recorded guidance date · Official documentation
Assessment context
The source states an exact date. Check its scope and required action in the cited guidance.
Known issuesAzure DevOps
Known issuesCisco
Cisco Meraki: Cloud Communication Interruption
Service incident
North and South America, Dashboard, End User Device Connectivity
Known issuesCloudflare6 source records
Service incident · 6 entries
- Cloudflare: Cloudflare Workers - Cron Trigger Activation Issues
Service incident
Workers · lasted 1193 min
Show the other 3 entries
- Cloudflare: Possible Network Congestion in Dallas, TX, United States (DFW)
Service incident
North America · lasted 28 min
Known issuesCommercial changes2 source records
Partner announcement · 2 entries
- Copilot offers and name updates
Partner announcement · Microsoft Partner Center announcements
- Join SQL Modernization Day on Oct 20
Partner announcement · Microsoft Partner Center announcements
Known issuesGitLab
GitLab.com: GitLab.com CI/CD pipelines delayed or not starting
Service incident
CI/CD · observed for at least 238 min
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.