Insights
The security advisories, deadlines and research worth your attention, each with a plain-language note on why it matters.
Updated October 6, 2026. Every item links to the original source.
This month's briefing
Architect's take, October 2026 Four dates every IT leader should have on the calendar this fall Lai Long on the October patch days, the end of updates for Windows Server 2012 and Windows 10, and why patching has become a capacity problem. Read Lai's takeField guides from our architects
Latest advisories and deadlines
-
Onapsis
October Patch Day: three HotNews notes, two rated CVSS 9.9 in S/4HANA and NetWeaver
Start with the S/4HANA code-injection fix and the Visual Composer access-control fix, then the four High notes.
-
SecurityWeek
Another record Patch Tuesday: more than 1,400 fixes and a Windows zero-day already exploited
The exploited flaw lets attackers bypass Mark of the Web protection in the Windows shell. Patch it first, then work down by risk.
-
Oracle
Oracle's largest Critical Patch Update yet: 1,449 security patches across 334 products
E-Business Suite took the most fixes. Oracle now also ships monthly security patches, so plan for a faster cadence.
-
SAP Security Notes
Next SAP and Microsoft patch day lands Tuesday, November 10
Block time for testing and rollout now, especially for internet-facing systems.
-
Oracle
Oracle's next quarterly Critical Patch Update arrives October 20
Schedule testing now for E-Business Suite, JD Edwards and database tiers.
-
BleepingComputer
Exchange Server 2016 and 2019 extended security updates end; no fixes after October
Move to Exchange Online or Subscription Edition. Servers still on 2016 or 2019 get no security fixes after this month.
-
Microsoft
Windows Server 2016 reaches the end of extended support
Plan upgrades now: servers still on Windows Server 2016 stop getting regular security fixes after January 12.
-
IBsolution
SAP ECC 6.0 (EHP 6-8) mainstream maintenance ends; extended maintenance to 2030 costs extra
Systems on EHP 5 or earlier already left mainstream maintenance at the end of 2025. Check your release level now.
-
eSecurity Planet
IBM Cost of a Data Breach 2026: the U.S. average reaches $11.5 million
The global average hit a record $4.99M. Teams using security AI and automation cut costs by about $1.9M.
-
Gartner via 01net
Gartner sees worldwide IT spending reaching $6.31 trillion in 2026, up 13.5%
AI infrastructure is driving the growth. Expect AI add-ons in every renewal you negotiate.
-
NETVarista
NETVarista joins the Microsoft AI Cloud Partner Program
Our architects gain Microsoft's partner training, tools and resources. Our independence rules stay exactly the same.
-
NETVarista
Architect's take: four dates every IT leader should have on the calendar this fall
Lai Long on October's patch days, the Windows Server 2012 and Windows 10 cutoffs, and why patching has become a capacity problem.
-
NETVarista
New reference design: AI agents resolving invoice exceptions across SAP, Oracle and Azure
Follow one invoice through the agents, the guardrails and the human approval.
Something here affect you?
Talk it through with an architect. It's free. General inquiries: [email protected]