- Home
- News
News
Blog posts, security advisories and announcements from Doğa Network. Up-to-date content on IT infrastructure, cybersecurity and cloud.
October 2026 Windows Server updates can break Exchange: symptoms and fix
After installing the October 2026 Windows Server updates, on-premises Exchange servers may show OWA errors, growing mail queues and DAG problems. Microsoft has confirmed the issue and published a workaround that does not require removing the update. Here are the symptoms, the affected updates and a step-by-step fix.
Read more →
PHP Vulnerabilities CVE-2026-109618 / CVE-2026-109619 (PHP2Shell): Critical RCE Flaws Under Attack
On 21 October 2026 PHP fixed two critical flaws (CVSS 9.2) allowing unauthenticated remote code execution. Exploitation attempts have been seen since 17 October and a confirmed intrusion at a European government agency was reported; mass successful exploitation is not confirmed. Update 25 October: no patch yet for the new CVE-2026-115560.
Read more →
October 2026 Patch Tuesday summary: 3 zero-days, 9.8-rated server flaws
Microsoft's 13 October 2026 Patch Tuesday updates fixed roughly 1,400 flaws. An exploited Windows Shell zero-day, 9.8-rated RCEs in DHCP/MSMQ/QUIC, Outlook preview-pane flaws and a final Exchange update, summarized with an SMB action plan.
Read more →
Exchange Server Vulnerability CVE-2026-70571: Critical RCE, last patch for 2016/2019
Microsoft fixed the critical Exchange Server remote code execution flaw CVE-2026-70571 (CVSS 8.1) with its 13 October 2026 updates. For Exchange 2016/2019 this is the last security update available, offered only to Period 2 ESU-enrolled organizations.
Read more →
Last month for Exchange 2016/2019: ESU program ends with October 2026
Exchange Server 2016 and 2019 reached end of support on 14 October 2025. The paid Extended Security Update (ESU) program now closes at the end of October 2026, and Microsoft has said there will be no further extension. For servers on ESU, this is the last month of updates. Here is what changes, the risks and your options.
Read more →
13 October 2026: Last patch for Windows Server 2012/R2, Windows 10 ESU year one ends
Patch Tuesday on 13 October 2026 will be the last Extended Security Updates (ESU) release for Windows Server 2012 and 2012 R2. On the same day, year one of the commercial ESU programme for Windows 10 ends, and Windows Server 2022 moves from mainstream to extended support. Here are the dates, the costs and an action plan for SMBs.
Read more →
KVKK principle decision: How far can employers monitor work email?
Decision No. 2026/2035 of Turkey's Personal Data Protection Board (KVKK), dated 16 September 2026, was published in the Official Gazette (Resmî Gazete) No. 33394 on 8 October 2026. The principle decision sets out when an employer may monitor the corporate email accounts it gives to staff and the other channels used for work. This article summarizes the main principles and adds a practical checklist for employers. Source: [Resmî Gazete, 8 October 2026, No. 33394](https://www.resmigazete.gov.tr/eskiler/2026/10/20261008-6.pdf) (in Turkish).
Read more →
Veeam Backup & Replication Vulnerability CVE-2025-64393: RCE via the Backup Viewer Role
CVE-2025-64393 (CVSS 9.4) in Veeam Backup & Replication 12 lets a user with the Backup Viewer role run code on the backup server. Fixed in build 12.3.2.4934.
Read more →
New customers: your first support request is free
Companies working with Doğa Network for the first time get up to 45 minutes of free remote IT support for their first support request.
Read more →