Microsoft Plugs Nearly 1,000 Security Holes

2026-09-15T19:23:22Z•986e31cbf402731dd9badf70e76961f78e3f2508ce0d5d24b41f2205283bd4a8
AT&TAWS GovCloudCISAFBI investigationGitHub leakMicrosoft Patch TuesdaySnowflakeTeamPCPactive exploitationad fraudcloud data theftcredential exposuredark webdata breachdriver's licensesextortionidentity theftresidential proxiessmart TVssoftware supply chain attacksstreaming devicesvulnerability management

What happened

KrebsOnSecurity reporting covering major cybersecurity developments, including unusually large Microsoft vulnerability patch releases, alleged mass theft and sale of driver’s-license images, arrests tied to the TeamPCP software supply-chain crime group, Snowflake-related extortion prosecutions, residential proxy abuse through smart TVs and streaming devices, and exposed government credentials in a public GitHub repository. The collection highlights active exploitation, large-scale data theft, supply-chain compromise, credential exposure, fraud, and risks from connected consumer devices.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
krebs_on_security
Record identifier
986e31cbf402731dd9badf70e76961f78e3f2508ce0d5d24b41f2205283bd4a8
Enrichment time
2026-09-15T19:23:22Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

Record · Microsoft Plugs Nearly 1,000 Security Holes · Baitaphish