CVE-2026-96951

Actively exploited Windows Shell Mark of the Web security bypass vulnerability.

Windows Fixes an Exploited Bypass, Plus 3 Stories

October’s Windows security update fixes an exploited download-warning bypass. Plus a Supreme Court privacy case, an Ivanti VPN zero-day, and a Docker Hub token flaw.