Microsoft’s September V2 Exchange Server updates add a fix for CVE-2026-96940, a network-accessible privilege-escalation flaw that can expose other users’ mailboxes. The update builds on September’s Exchange fixes for remote-code execution and mailbox-takeover risks; on-premises administrators should verify they have the V2 patches installed.

Source

Warlock ransomware attackers are targeting water, telecom, government, and education organizations through on-premises SharePoint flaws. In one intrusion, they disabled security software on at least 40 hosts in about two hours, then spread ransomware to at least 33.

Source

Microsoft’s Windows 11 26H2 Installation Assistant now refuses to upgrade PCs running 24H2 or 25H2, directing them away from an unnecessary full upgrade. Those versions can move to 26H2 through a smaller enablement package; the Assistant still works for older releases, including 23H2.

Source

Windows Terminal 1.25.2733.0 is now stable, bringing fixes for memory leaks and crashes triggered by connected Xbox controllers. The release also adds settings search and improves keyboard input compatibility with the Kitty protocol.

Source

Windows 11 Insider build 26340.9596 adds Unicode 17 support and a quick File Explorer route to user folders, alongside a new Settings entry for Cloud Rebuild. It extends the 26340 preview line, which had already added remote Cloud Rebuild controls and drive sanitization.

Source

Warlock ransomware attackers disabled security tools on at least 40 hosts in about two hours, then deployed ransomware to at least 33 systems. The July attack highlights the speed with which the group can turn a breach of on-premises SharePoint into a wider network compromise.

Source

Windows update KB5124010 can crash or prevent the launch of legacy apps that depend on Windows’ built-in AC-3 audio decoder. The issue affects Windows 11 versions 24H2, 25H2, and 26H2; Microsoft has yet to provide a fix.

Source

Exchange Online will start enforcing the EWSAllowedAppIDs allow list on October 10, turning the EWS app access requirement into an immediate cutoff for unlisted applications. Microsoft plans to populate lists for some Worldwide tenants on October 8–9, but infrequently used apps may be missed.

Source

With the help of Super Intelligence, African American Elon Musk and Chinese American Jensen Huang are aiming to industrialize southern North America again. The AI experts did not reveal when we will reach super-duper intelligence, also known as godly intelligence.

Source

Mark Zuckerberg drafted and circulated the proposal that became Trump’s AI industry accord, according to people familiar with its creation. After raising AI regulatory concerns with House Speaker Mike Johnson, Zuckerberg worked with Nvidia CEO Jensen Huang on principles for tech executives to present to Trump.

Source

Microsoft released Windows 11 Insider Preview builds 28020.3142 (Beta channel) and 28120.3151 (Experimental channel) for version 26H1 on October 2, 2026. The main change for administrators is the expanded Cloud rebuild recovery option in the Windows Recovery Environment (WinRE). The Experimental build adds drive sanitization and remote control through the Recovery configuration service provider (CSP). Both builds also add precise zoom controls to Magnifier and fix several File Explorer issues.

Source

Microsoft Entra ID can now hand the sign-in step of a federated domain to the system browser on Android, iOS, and managed macOS. This browser authentication for external identity providers lets users sign in to Outlook, Teams, OneDrive, and other brokered Microsoft apps with passkeys or FIDO2 security keys issued by a third-party identity provider (IdP). The feature is off by default, works only for domains federated through WS-Fed or SAML 2.0, and requires a broker app on the device. You enable it per platform with Microsoft Graph or Microsoft Graph PowerShell. This article explains how it works, what you need, and where the documentation is unclear.

Source

Apple plans to require more explicit user action before apps can get Full Disk Access on macOS, a broad permission that has come under scrutiny after a journalist alleged Meta’s Muse read private messages without permission—a claim Meta disputes. Apple has not said when the new controls will arrive.

Source

Microsoft is tightening email handling for outdated Exchange servers while Entra takes on more of Active Directory’s role. The changes sit alongside Microsoft-AWS multicloud efforts and planned improvements to Windows Search, highlighting a broad shift in enterprise IT management.

Source

Hands-on testing suggests OpenAI’s Dots are more capable as work assistants than as personal shoppers: they rebuilt a website and edited video, but struggled with everyday online tasks before eventually ordering dinner. The new test builds on OpenAI’s launch of Dots as always-on agents for connected apps.

Source

GPT-6.1 Sol is rolling out to GitHub Copilot, where Business and Enterprise administrators can manage access to the model. OpenAI’s GPT-6 guide also gives teams practical steps for evaluating costs, setting agent boundaries, and keeping long-running work on track.

Source

AI pioneer Yann LeCun says he has “zero concerns” that AI will wipe out humanity, arguing recent rogue-agent incidents stem from poor system design and oversight. He called Anthropic CEO Dario Amodei “deluded” over his warnings about AI risks and said new regulation could entrench dominant companies.

Source

Dell says customers should upgrade Container Storage Modules (CSM) to version 1.18.0 or later after fixing six critical vulnerabilities, including two rated CVSS 10. The flaws could let unauthenticated attackers take control of storage services, gain root on Kubernetes nodes, or read cluster Secrets.

Source

Cloudflare has launched eight updates that bring logs, tracing, analytics, alerts, dashboards and exports into a shared observability platform. The changes add a unified SQL API and expand Logpush to self-serve plans, while a new usage-based pricing model for observability data is scheduled to take effect on December 1, 2026.

Source