Hackers Are Already Using This Windows Flaw. Update Your Laptop Before You Open Another File
Microsoft just fixed 1,413 security flaws, and attackers are already exploiting one of them. Here is what it does and how to update your Windows laptop in minutes.
Laptop showing a red broken padlock warning with the headline Update Your Laptop Now
Microsoft has released one of the biggest security updates in its history: fixes for 1,413 vulnerabilities across Windows, Office and its other products. More than 1,100 of them affect Windows.
Most of those flaws are theoretical risks. One is not. Attackers are already using it.
What the flaw does
When you download a file from the internet or an email, Windows quietly tags it with something called Mark of the Web. Think of it as a warning sticker. It is why Windows sometimes asks, are you sure you want to open this?, and why Office opens downloaded documents in a protected read-only mode.
The flaw, tracked as CVE-2026-96951, lets attackers peel that warning sticker off. If you open a specially crafted file, Windows may treat it as safe and skip those extra checks. All the attacker needs is to convince you to open it.
This is serious enough that the US cyber agency CISA has ordered federal agencies to patch it by October 16.
How to update Windows 11
Plug in your charger and connect to Wi-Fi. Updates can be large, so use a data plan you can afford.
Click Start, then Settings, then Windows Update.
Click Check for updates and install everything that appears.
Restart when asked. The fix is not active until you restart.
On Windows 10, the path is Start, then Settings, then Update and Security, then Windows Update. Security updates for Windows 10 now run until October 2027, so you can still get this fix.
Until you update
Do not open attachments you were not expecting, even from people you know. Their account could be compromised.
Be wary of files sent on WhatsApp or Telegram that claim to be invoices, CVs or payment receipts.
Only download software from official websites.
For business owners
If your staff use Windows laptops, make sure every machine gets this update this week. One infected laptop can expose your whole office. And remember that updating closes the door but does not clean up a machine that was already compromised. If anything looks unusual, get it checked.
Sources: SecurityWeek and TechStartups
โ Frequently Asked Questions
What is the Windows flaw attackers are already exploiting?
It is tracked as CVE-2026-96951. A specially crafted file can strip Windows' Mark of the Web warning, so Windows may treat a dangerous download as safe and skip its usual safety checks. The attacker only needs you to open the file.
How do I update Windows 11?
Click Start, then Settings, then Windows Update. Click Check for updates, install everything that appears, then restart. The fix is not active until you restart.
Can Windows 10 users still get this fix?
Yes. Go to Start, then Settings, then Update and Security, then Windows Update. Security updates for Windows 10 run until October 2027.
How do I stay safe until I update?
Do not open attachments you were not expecting, even from people you know. Be wary of invoices, CVs or payment receipts sent on WhatsApp or Telegram, and only download software from official websites.
Belma
I'm Mujeeb Bello, better known as Belma, and I started TechInNaija to tell the stories behind Nigeria's growing tech scene in a simple, relatable way. I'm Head of Marketing at Scale Through Automation, where I work on AI and business automation, and I spent over five years as a Virtual Assistant helping businesses run their operations and digital tools. I studied Agricultural Education, but curiosity about technology shaped my career. I write for everyday Nigerians, founders, students and anyone curious about tech, so you leave every story knowing why it matters and how it affects you.
More from Belma โ๐ฐ Related Stories
