The one Microsoft bug being exploited right now is rated Important, not Critical. CVE-2026-96951 lets a crafted file slip past Mark of the Web, the check that flags internet downloads before you open them. SmartScreen, Office Protected View and the macro block all lean on it, so one bypass silences several warnings at once. It arrived inside a record release: 1,413 CVEs on Tuesday, up from September's 974, which was itself the record. Counts that size make triage the job. Windows 11 24H2 Home and Pro also received their final update this month. https://www.bleepingcomputer.com/news/microsoft/microsoft-october-2026-patch-tuesday-fixes-1-411-flaws-3-zero-days/ #CyberSecurity #InfoSec #PatchTuesday