Microsoft's September 2026 security patches are disabling Remote Desktop Services across Windows Server 2019, 2022, and 2025, leaving administrators unable to access systems and requiring hard resets in some cases.
Windows admins are reporting widespread Remote Desktop Services (RDS) failures following the deployment of September 2026 security updates. The issue affects multiple Windows Server versions, preventing legitimate user connections and severely impacting remote access capabilities.
Affected Systems
Windows Server 2019, 2022, and 2025 installations are experiencing RDS connection failures. The scope suggests the issue stems from a common component updated across these versions.
Impact
Administrators report complete inability to establish Remote Desktop connections to affected servers. In severe cases, users cannot restore functionality without performing hard resets—a time-consuming workaround that indicates the updates may have introduced a critical flaw in the RDS authentication or connection handling process.
Response Required
Organizations running these Windows Server versions should assess whether their infrastructure has been impacted. Administrators should verify RDS functionality on test systems before rolling out the September updates to production environments.
Microsoft has not yet issued an official statement or emergency patch addressing the RDS failures. Organizations experiencing the issue should document specific error messages and prepare mitigation strategies, including potential rollback procedures for the problematic updates.
This incident underscores the risks associated with broad security patch deployments and the importance of staged rollout procedures in enterprise environments. The timing during the business month may result in significant disruptions for organizations relying on remote access infrastructure.
Trezor alerted customers Wednesday that attackers exploited a breach at its third-party email provider to launch phishing campaigns. The cryptocurrency hardware wallet maker urged users to remain vigilant against fraudulent communications.
Forgejo, a self-hosted Git service, released version 16.0.4 to address a critical remote code execution vulnerability affecting all versions up to 16.0.3. Users should upgrade immediately.
Surfshark disclosed that hackers accessed internal testing and proxy servers following a configuration error that exposed systems to the internet. The VPN provider is investigating the scope of the breach.
Google has enabled Android users to securely migrate login credentials between password managers. The feature is currently available in a limited number of apps, with broader support expected soon.