Microsoft’s September 2026 V2 Exchange Server security update adds a fix for CVE-2026-96940, a high-severity flaw that could let an authenticated attacker access other users’ mail and attachments within the same organization. Microsoft says it found the vulnerability internally and has no evidence of active exploitation, but urges administrators to patch promptly.

Source

Warlock ransomware attackers are targeting water, telecom, government, and education organizations through on-premises SharePoint flaws. In one intrusion, they disabled security software on at least 40 hosts in about two hours, then spread ransomware to at least 33.

Source

Warlock ransomware attackers disabled security tools on at least 40 hosts in about two hours, then deployed ransomware to at least 33 systems. The July attack highlights the speed with which the group can turn a breach of on-premises SharePoint into a wider network compromise.

Source

Microsoft has started rolling out Windows 11 26H2, and the good news for administrators is that Microsoft currently lists no active upgrade-blocking issues. Even so, the release health page still shows three recently mitigated problems that can affect post-install stability: USB audio failures, broken trust relationships on some domain-joined devices, and black screens in certain virtual desktop setups.

Source

Microsoft plans to deprecate the Windows Deployment Services (WDS) server role, including its Preboot Execution Environment (PXE) boot functionality, starting with the next Windows Server release. WDS continues to work on Windows Server 2025 and earlier, but you should begin planning a migration now. This article explains what the deprecation covers and evaluates the alternatives Microsoft names: the Configuration Manager PXE responder without WDS, non-Microsoft PXE solutions, and UEFI HTTP(S) Boot. It also covers Windows Autopilot for new devices and the planning steps Microsoft recommends.

Source

Microsoft's September 2026 security roundup adds a Security Copilot detonation summary to Microsoft Defender for Office 365 and network-level data loss prevention (DLP) through Microsoft Purview and Microsoft Entra Global Secure Access. Purview also gains larger auto-labeling simulations, eDiscovery support for user-owned SharePoint Embedded containers, file-level archiving, and permanent deletion with Priority Cleanup. In addition, Intune Remote Help, Enterprise Application Management, and Microsoft Cloud PKI are coming to GCC High. This article explains the requirements, configuration steps, and limitations of each feature.

Source

Microsoft’s emergency KB5129195 update only partly repairs the USB Audio Class 1.0 failures introduced by September’s Patch Tuesday release. Systems that previously lost audio or showed Code 10 errors may still be affected, while the new patch mainly restores eight-channel and 3D audio operation.

Source

Microsoft has published a temporary workaround for Windows 11 domain login failures caused by September 2026 updates, including KB5124008. The guidance follows reports that the update broke domain trust through Machine Identity Isolation, an issue covered in reports about KB5124008 breaking domain trust and the failure of emergency updates to fix secure domain logins.

Source