[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwVi83EUzxpkr5GX9ML7JOp1tONsAAPu7lyQW_C7WbJk":3},{"article":4,"iocs":38,"watch_terms":39,"solutions":40,"lesson":81},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"0fa09696-1671-4491-b76e-0a70c7792dd3","Microsoft: September Windows updates break Always On VPN connections","microsoft-september-windows-updates-break-always-on-vpn-connections-5cd3f2","Microsoft warned that the September 2026 security updates may also break Always On VPN connections on some Windows 11 systems. [...]","Microsoft has alerted IT administrators that its September 2026 security updates for Windows 11 may cause Always On VPN connections to fail. The issue occurs when the VPN is configured for automatic protocol selection and attempts to switch between IKEv2 and SSTP. A temporary workaround involves manually selecting a single protocol (SSTP or IKEv2) in the VPN profile.","Microsoft September 2026 updates cause Always On VPN connection failures.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fmicrosoft\u002Fmicrosoft-september-2026-windows-updates-break-always-on-vpn-connections\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F02\u002F13\u002FWindows-headpic.jpg","2026-09-23T11:18:13+00:00","2026-09-23T12:00:23.149601+00:00",7,[17,20,22,25,28],{"name":18,"type":19},"Always On VPN","product",{"name":21,"type":19},"Windows 11",{"name":23,"type":24},"Microsoft","vendor",{"name":26,"type":27},"IKEv2","technology",{"name":29,"type":27},"SSTP","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36],{"category":37},{"id":30,"icon":32,"name":33,"slug":34},[],[23,18,21],{"controls":41,"vendors":77},[42,70],{"slug":43,"name":44,"problem":45,"products":46},"patch-management","Automated patch management","Known holes get closed in days, not months.",[47,55,62],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":56,"vendor_name":23,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":63,"vendor_name":64,"vendor_logo":65,"product_slug":66,"product_name":67,"url":68,"description":69},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"slug":71,"name":72,"problem":73,"products":74},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[75,76],{"vendor_slug":48,"vendor_name":49,"vendor_logo":50,"product_slug":51,"product_name":52,"url":53,"description":54},{"vendor_slug":56,"vendor_name":23,"vendor_logo":57,"product_slug":58,"product_name":59,"url":60,"description":61},[78],{"slug":56,"name":23,"logo_path":57,"roles":79},[80],"affected",{"slug":82,"title":83,"body":84,"framework_refs":85,"framework_notes":95},"windows-security-update-breaks-always-on-vpn-protocol-misconfiguration-at-root","Windows Security Update Breaks Always On VPN — Protocol Misconfiguration at Root","Microsoft's September 2026 Windows 11 security updates introduced a regression that disrupts Always On VPN connections configured for automatic protocol selection, specifically when switching between IKEv2 and SSTP. This highlights the inherent risk of deploying security patches without adequate pre-production testing, particularly for critical remote access infrastructure. Organizations relying on Always On VPN for secure remote workforce connectivity may find employees suddenly unable to connect, creating both productivity and security gaps. The fact that a manual workaround exists underscores the importance of having documented fallback procedures before patch deployment. Patch management must account not only for vulnerability remediation but also for functional regression in security-critical services.",[86,87,88,89,90,91,92,93,94],"CIS Control 7.3 – Perform Automated Operating System Patch Management","CIS Control 7.4 – Perform Automated Application Patch Management","CIS Control 4.1 – Establish and Maintain a Secure Configuration Process","NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management Planning","NIST CM-6 – Configuration Settings","NIST CM-3 – Configuration Change Control","NIST IR-4 – Incident Handling","ITIL Change Management – Standard and Emergency Change Procedures","NIST SP 800-113 – Guide to SSL VPNs",{}]