HIGH/ OCTOBER 14, 2026TODAY’S BRIEFING — #208
Microsoft 1,411-flaw Patch Tuesday; Ivanti zero-day root access; OpenAI spy device arrest
Microsoft patches 1,411 flaws including active zero-day (CVE-2026-96951); Ivanti Connect Secure zero-day chain enables unauthenticated root access; OpenAI employee arrested for planting listening device in executive conference room.
CVE-2026-96951Microsoft Windows — Command injection vulnerability; actively exploited in the wild; patched in October Patch TuesdayCVE-2026-104935Ivanti Connect Secure — Authentication bypass by spoofing; enables unauthenticated RCE as root; patched; added to CISA KEVCVE-2026-108398Microsoft — Publicly disclosed zero-day; patched in October Patch Tuesday
Read the full briefing →