Microsoft Fixes 1,118 Vulnerabilities in October Patch Tuesday and Introduces New Risk Cohorts

Microsoft’s October 2026 Patch Tuesday briefing outlines 1,118 vulnerabilities across 15 risk groups, alongside a new approach designed to help security teams review large update releases. Called risk cohorts, these groups bring together flaws that require similar questions about an organization’s systems, users, and exposure. Microsoft’s accompanying document maps individual CVEs to these shared areas of assessment. The goal is to reduce repeated work without removing the need to review each vulnerability. Instead of asking the same deployment questions hundreds of times, analysts can assess a common area once and use that information across several CVEs. Microsoft describes the approach as exploratory, not a replacement for...

Read the full article at the source.