Microsoft

Microsoft has issued several security updates in October 2026, including an out‑of‑band patch for a critical Brotli decoder vulnerability in .NET (CVE‑2026‑111497) and an October Windows update that resolves more than 1,400 security flaws for Windows 11 versions 26H2, 24H2 Home and Pro. The company also reported using artificial intelligence to scan its codebase, which enabled it to patch 1,413 vulnerabilities in a single month, setting a record for the scale of its October Patch Tuesday release. In addition, Microsoft warned customers about a supply‑chain attack targeting ConnectWise Cloud Backup, a service used to protect Microsoft 365 and Google Workspace data, and noted that ConnectWise had disabled access to the compromised backup application. These actions reflect Microsoft’s ongoing response to emerging cyber threats and its integration of AI tools into vulnerability detection and remediation.