The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Security news · Microsoft Security Blog
Weekly briefing
Week 42 · 12 Oct – 18 Oct 2026 UTC · assess the changes, then plan the next dates.
All dated changes in this period
1570 source records · 75 groupsSecurityUbiquiti UniFi
Security Advisory Bulletin 070
Security news · Ubiquiti security advisory bulletins
SecurityMicrosoft 365 Apps / Windows / Windows Server2 source records
Exploited vulnerability · 2 entries
- Windows Shell Security Feature Bypass Vulnerability
Exploited vulnerability
CVE-2026-96951
Assessment context
Microsoft reports exploitation · Listed in CISA KEV · Microsoft states that customer action is required
- Windows Rich Text Edit Control Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70096
Assessment context
Microsoft states that customer action is required
Security.NET / Active Directory / Windows / Windows Server2 source records
Published vulnerability · 2 entries
- Active Directory Federation Services (AD FS) Information Disclosure Vulnerability
Published vulnerability
CVE-2026-97788
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-96222
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Security.NET / Windows / Windows Server
Microsoft QUIC Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-105016
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
Security.NET34 source records
Published vulnerability · 34 entries
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-58280
Assessment context
Microsoft states that customer action is required
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-69651
Assessment context
Microsoft states that customer action is required
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-70162
Assessment context
Microsoft states that customer action is required
Show the other 31 entries
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-84008
Assessment context
Microsoft states that customer action is required
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-96958
Assessment context
Microsoft states that customer action is required
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-96959
Assessment context
Microsoft states that customer action is required
- .NET Denial of Service Vulnerability
Published vulnerability
CVE-2026-96960
Assessment context
Microsoft states that customer action is required
- .NET Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70161
Assessment context
Microsoft states that customer action is required
- .NET Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70165
Assessment context
Microsoft states that customer action is required
- .NET Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70190
Assessment context
Microsoft states that customer action is required
- .NET Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-96225
Assessment context
Microsoft states that customer action is required
- .NET Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-96231
Assessment context
Microsoft states that customer action is required
- .NET Framework Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-85363
Assessment context
Microsoft states that customer action is required
- .NET Framework Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70007
Assessment context
Microsoft states that customer action is required
- .NET Framework Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70035
Assessment context
Microsoft states that customer action is required
- .NET Framework Security Feature Bypass Vulnerability
Publicly disclosed vulnerability
CVE-2026-108398
Assessment context
Publicly disclosed before the fix · Microsoft states that customer action is required
- .NET Framework Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-70194
Assessment context
Microsoft states that customer action is required
- .NET Framework Tampering Vulnerability
Published vulnerability
CVE-2026-97801
Assessment context
Microsoft states that customer action is required
- .NET Information Disclosure Vulnerability
Published vulnerability
CVE-2026-66822
Assessment context
Microsoft states that customer action is required
- .NET Information Disclosure Vulnerability
Published vulnerability
CVE-2026-96229
Assessment context
Microsoft states that customer action is required
- .NET Information Disclosure Vulnerability
Published vulnerability
CVE-2026-96232
Assessment context
Microsoft states that customer action is required
- .NET Information Disclosure Vulnerability
Published vulnerability
CVE-2026-96234
Assessment context
Microsoft states that customer action is required
- .NET Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70174
Assessment context
Microsoft states that customer action is required
- .NET Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-83520
Assessment context
Microsoft states that customer action is required
- .NET Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-87697
Assessment context
Microsoft states that customer action is required
- .NET Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-96224
Assessment context
Microsoft states that customer action is required
- .NET Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-96235
Assessment context
Microsoft states that customer action is required
- .NET Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-96237
Assessment context
Microsoft states that customer action is required
- .NET Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-96238
Assessment context
Microsoft states that customer action is required
- .NET Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-96957
Assessment context
Microsoft states that customer action is required
- .NET and Visual Studio Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-102869
Assessment context
Microsoft states that customer action is required
- .NET and Visual Studio Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70197
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-96233
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-102870
Assessment context
Microsoft states that customer action is required
SecurityASP.NET Core Denial of Service Vulnerability5 source records
Published vulnerability · 5 entries
- ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-70159
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-70181
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-70186
Assessment context
Microsoft states that customer action is required
Show the other 2 entries
- ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-70196
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Denial of Service Vulnerability
Published vulnerability
CVE-2026-96236
Assessment context
Microsoft states that customer action is required
SecurityASP.NET Core Elevation of Privilege Vulnerability3 source records
Published vulnerability · 3 entries
- ASP.NET Core Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70175
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70179
Assessment context
Microsoft states that customer action is required
- ASP.NET Core Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70183
Assessment context
Microsoft states that customer action is required
SecurityASP.NET Core Remote Code Execution Vulnerability
ASP.NET Core Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-96230
Assessment context
Microsoft states that customer action is required
SecurityASP.NET Core Security Feature Bypass Vulnerability
ASP.NET Core Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-70188
Assessment context
Microsoft states that customer action is required
SecurityASP.NET Core Tampering Vulnerability
ASP.NET Core Tampering Vulnerability
Published vulnerability
CVE-2026-88092
Assessment context
Microsoft states that customer action is required
SecurityActive Directory / Windows / Windows Server17 source records
Published vulnerability · 17 entries
- Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Published vulnerability
CVE-2026-83645
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Published vulnerability
CVE-2026-85319
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Published vulnerability
CVE-2026-85321
Assessment context
Microsoft states that customer action is required
Show the other 14 entries
- Active Directory Federation Services (AD FS) Denial of Service Vulnerability
Published vulnerability
CVE-2026-85324
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-69982
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-70005
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-103576
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-108131
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-83511
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-83646
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-83674
Assessment context
Microsoft states that customer action is required
- Active Directory Federation Services (AD FS) Spoofing Vulnerability
Published vulnerability
CVE-2026-96252
Assessment context
Microsoft states that customer action is required
- Windows Active Directory Domain Services Denial of Service Vulnerability
Published vulnerability
CVE-2026-83647
Assessment context
Microsoft states that customer action is required
- Windows Active Directory Domain Services Denial of Service Vulnerability
Published vulnerability
CVE-2026-83648
Assessment context
Microsoft states that customer action is required
- Windows Active Directory Domain Services Denial of Service Vulnerability
Published vulnerability
CVE-2026-83667
Assessment context
Microsoft states that customer action is required
- Windows Active Directory Domain Services Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70229
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Windows Active Directory Domain Services Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-88165
Assessment context
Microsoft states that customer action is required
SecurityAzure / Azure Arc
Azure Arc Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-96204
Assessment context
Microsoft states that customer action is required
SecurityAzure / Azure CLI / Azure DevOps / Microsoft 365 Apps
Azure DevOps Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69877
Assessment context
Microsoft states that customer action is required
SecurityAzure / Microsoft 365 Apps3 source records
Published vulnerability · 3 entries
- Azure Key Vault Client SDK Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-85925
Assessment context
Microsoft states that customer action is required
- Azure Key Vault Information Disclosure Vulnerability
Published vulnerability
CVE-2026-88132
Assessment context
Microsoft states that customer action is required
- Azure Key Vault Security Feature Bypass Vulnerability
Published vulnerability
CVE-2026-85922
Assessment context
Microsoft states that customer action is required
SecurityAzure / Windows / Windows Server2 source records
Published vulnerability · 2 entries
- Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69454
Assessment context
Microsoft states that customer action is required
- Microsoft Azure Attestation service and Device Health Attestation Service Information Disclosure Vulnerability
Published vulnerability
CVE-2026-69577
Assessment context
Microsoft states that customer action is required
SecurityAzure3 source records
Published vulnerability · 3 entries
- Azure CycleCloud Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-100207
Assessment context
Microsoft states that customer action is required
- Azure HDInsight Information Disclosure Vulnerability
Published vulnerability
CVE-2026-85891
Assessment context
Microsoft states that customer action is required
- Azure Storage Library Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-88094
Assessment context
Microsoft states that customer action is required
SecurityCertificate services5 source records
Published vulnerability · 5 entries
- Active Directory Certificate Services (AD CS) Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-83666
Assessment context
Microsoft states that customer action is required
- Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Published vulnerability
CVE-2026-96861
Assessment context
Microsoft states that customer action is required
- Network Device Enrollment Service (NDES) Denial of Service Vulnerability
Published vulnerability
CVE-2026-96866
Assessment context
Microsoft states that customer action is required
Show the other 2 entries
- Network Device Enrollment Service (NDES) Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-69802
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Network Device Enrollment Service (NDES) Spoofing Vulnerability
Published vulnerability
CVE-2026-85323
Assessment context
Microsoft states that customer action is required
SecurityConfiguration Manager / Windows2 source records
Published vulnerability · 2 entries
- Configuration Manager Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-88075
Assessment context
Microsoft states that customer action is required
- Microsoft Configuration Manager Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-70049
Assessment context
Microsoft states that customer action is required
SecurityDefender / Windows
Microsoft Defender Information Disclosure Vulnerability
Published vulnerability
CVE-2026-70264
Assessment context
Microsoft states that customer action is required
SecurityDefender
Microsoft Defender Information Disclosure Vulnerability
Published vulnerability
CVE-2026-105726
Assessment context
Microsoft states that customer action is required
SecurityDynamics Business Central Elevation of Privilege Vulnerability
Dynamics Business Central Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-102226
Assessment context
Microsoft states that customer action is required
SecurityDynamics Business Central Information Disclosure Vulnerability
Dynamics Business Central Information Disclosure Vulnerability
Published vulnerability
CVE-2026-105728
Assessment context
Microsoft states that customer action is required
SecurityExchange6 source records
Published vulnerability · 6 entries
- Microsoft Exchange Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-77910
Assessment context
Microsoft states that customer action is required
- Microsoft Exchange Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-87692
Assessment context
Microsoft states that customer action is required
- Microsoft Exchange Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-87695
Assessment context
Microsoft states that customer action is required
Show the other 3 entries
- Microsoft Exchange Server Elevation of Privilege Vulnerability
Published vulnerability
CVE-2026-87696
Assessment context
Microsoft states that customer action is required
- Microsoft Exchange Server Remote Code Execution Vulnerability
Published vulnerability
CVE-2026-70571
Assessment context
Microsoft rates the vulnerability Critical · Microsoft states that customer action is required
- Microsoft Exchange Server Spoofing Vulnerability
Published vulnerability
CVE-2026-70279
Assessment context
Microsoft states that customer action is required
Groups collect records about the same product or named security topic on one UTC date. Open a record for its source and history; grouping alone does not establish a shared cause or impact.