Cybersecurity update: CISA adds Microsoft Windows and Office flaws to the Known

These are official cybersecurity alerts from the past week that may affect small and medium businesses. Each item is summarised from the source and links back to it. If you run the products named below, apply the vendor’s updates.

CISA adds Microsoft Windows and Office flaws to the Known

CISA, 22 September 2026.

CISA added vulnerabilities affecting Microsoft Windows and Office to its Known Exploited Vulnerabilities catalog. Attackers are already using these flaws. Apply the vendor updates on PCs and laptops, then restart where Microsoft asks you to.

If these products are in use, apply the vendor updates and read the advisory: official source.

How Techloom can help

Techloom can review devices, email filtering and Microsoft 365 settings as a security assessment or through managed IT support. We do not guarantee that any control prevents every attack.