Skip to content
Today
Sections

Person

Dustin Childs

Security researcher and head of threat awareness at the Zero Day Initiative (ZDI), known for his monthly Patch Tuesday analyses of Microsoft's security updates.

Known aliases

  • Childs

Current stories

leadershipConfirmed23 publishers

Microsoft's October release of 1,407 CVEs tops 2020's full-year record by 146

Microsoft shipped a record 1,407 CVEs on October Patch Tuesday, including an exploited Windows Shell Mark of the Web bypass. The component's 2026 record argues for a standing slot in the monthly patch cycle.

Publishers:blog.talosintelligence.com crowdstrike.com csoonline.com cyberdaily.au cyberscoop.com dev.to esecurityplanet.com hackread.com helpnetsecurity.com infosecurity-magazine.com isc.sans.edu jpcert.or.jp krebsonsecurity.com pcworld.com pureinfotech.com securityaffairs.com securityweek.com techrepublic.com techspot.com tenable.com thecyberexpress.com thehackernews.com zdnet.com

Perspective Coverage

23 publishers
Builder
Builder 16%
Operator
Operator 68%
Investor
Investor 16%

Reality

Evidence74
Adoption
Not scored
Hype gap+28
Incentives
Not scored
Confidence72
buildOne report1 publisher

Windows DNS Server's 9.8 bug takes one unauthenticated packet to port 53

Microsoft patched CVE-2026-69730, a CVSS 9.8 remote code execution flaw in the Windows DNS Server role reachable with one unauthenticated packet to port 53. In most Active Directory shops that role runs on the domain controller, so the box answering on port 53 also holds the identity database.

Publishers:dev.to

Reality

Evidence45
Adoption
Not scored
Hype gap+20
Incentives
Not scored
Confidence40
buildOne report1 publisher

A researcher is timing zero-days to Patch Tuesday, and the monthly cadence has no reply

Ten drops since April 2026, the latest handing any local user SYSTEM on fully patched Windows 11. The next scheduled fix can be 28 days out, so mitigation has to be a day-one job.

Publishers:dev.to

Reality

Evidence32
Adoption36
Hype gap+18
Incentives48
Confidence34