55
55
55
60
Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery
Microsoft patches 419 vulnerabilities in record-breaking Patch Tuesday; Windows Winsock zero-day CVE-2026-68820 is actively exploited by Lazarus Group.
Microsoft's August Patch Tuesday fixes 419 vulnerabilities (62 critical, 357 important), among the largest monthly counts on record, following 206 fixes in June and 622 in July as AI-assisted discovery drives unprecedented volume. Three flaws are zero-days; Windows Winsock bug CVE-2026-68820 is exploited in the wild by Lazarus Group in job-themed attacks using PDFs with a trojanised reader. CVE-2026-62832, publicly disclosed by researcher Nightmare Eclipse via the LegacyHive PoC, is also patched. Microsoft now lists bugs by product family instead of itemized CVEs, which defenders warn complicates triage.
80
55
30
55
55
30
55
35
30
Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack
60
55
55
60
42
55
55
30
42
42
60
55
60
55
55
55
55
60
55
30
55
55
55
55
42
42
60