Record Patch Tuesday, BeyondTrust zero-day and Rank Math PRO malware

Microsoft shipped a record 1,411 fixes in its October Patch Tuesday, including three zero-days. CISA added the BeyondTrust Remote Support flaw CVE-2026-102764 (CVSS 9.3) to its exploited list, and Rank Math PRO 3.0.123 briefly shipped with malicious code.

• Microsoft fixed 1,411 vulnerabilities, about 70 rated Critical
• CVE-2026-96951 in Windows Shell is actively exploited
• BeyondTrust flaw allows unauthenticated access, CVSS 9.3
• Rank Math PRO 3.0.123 carried malware on October 15–16