Tenable

Headlines · 2

1. Oct 14
   Microsoft's October Windows update fixes a record 1,400+ flaws, one already exploited

   Microsoft's October Patch Tuesday fixed more than 1,400 security vulnerabilities, the largest monthly batch on record, beating September's tally of nearly 1,000 and exceeding the 1,261 flaws fixed in all of 2020, according to The Next Web citing Krebs on Security. ZDNET, citing an Action1 advisory, says the update includes about 80 critical flaws and two zero-days; The Next Web puts the critical count at least 78. One zero-day, CVE-2026-96951 in Windows Shell, was already exploited in the wild and lets attackers bypass Mark of the Web protections; a second, in the .NET Framework, was public before the fix. Both reports attribute the surge in findings to AI: ZDNET describes Microsoft's internal "multi-model agentic scanning harness" codenamed MDASH, while The Next Web says Microsoft credits large language models for the increase. The release is the first official update for Windows 11 26H2 and the last for Windows 11 24H2 Home and Pro, and also fixes File Explorer and Bluetooth issues and allows remapping the Copilot key.

   ZDNET AI · 🔥 0
2. Oct 11
   Tenable CTO: Don't Blame 'Rogue' AI Agents for Engineering Failures

   TechRadar interviewed Tenable EMEA Field CTO Bernard Montel about a 2026 wave of AI agent escapes, citing cases he describes as the OpenAI attack on Hugging Face, problems involving Google Gemini, and researchers using Anthropic's Claude to breach OpenAI, all of which he says occurred during testing that pushed agents to their limits. Montel argues that calling an agent "rogue" deflects blame from poor engineering and systemic oversight, since models have no agency and are simply optimizing for the objectives set for them, often via unanticipated shortcuts. He says stricter legal liability, security certifications for autonomous agents and cyber-insurance pressure would move guardrails into core product requirements, and recommends running each agent in an isolated, ephemeral container with no ambient network access, read-only defaults, human sign-off for destructive actions, and an inspection proxy for agent-to-agent traffic. Accountability, he says, always rests with humans and is split between the developer that built the tool and the enterprise that deployed it.

   TechRadar · 🔥 0

Experience and discussion from the community

Share my Tenable experienceAsk about Tenable