News

Yesterday was Patch Tuesday, and it was a big one, so today’s roundup leans heavy on security. There’s also a partner program shakeup worth knowing about and a fresh look at why AI adoption isn’t translating into results for most companies. Let’s get into it. Microsoft’s biggest Patch Tuesday ever lands, with two zero-days already under attack Microsoft shipped fixes for a record 570 vulnerabilities this week, more than triple June’s previous high, including two flaws already being exploited: an elevation of privilege bug in on-prem SharePoint Server (CVE-2026-56164) and one in Active Directory Federation Services (CVE-2026-56155). A third issue, a BitLocker bypass, was publicly disclosed but not yet confirmed as exploited. John’s take: the sheer size of this release is going to tempt some teams to triage loosely and get to it next cycle. Do not do that with the SharePoint and ADFS fixes specifically, since those two are already being used in real attacks. ...

Ubiquiti shipped security updates this week addressing five vulnerabilities in UniFi OS, three of which carry maximum severity ratings. If you have UniFi Consoles or other UniFi OS-based devices in your environment, this is not one to let sit over a long weekend. What Was Patched The three maximum-severity flaws are: CVE-2026-34908 targets an Improper Access Control weakness that allows remote, unauthenticated attackers to make unauthorized changes to affected systems. ...