Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

AI Summary

Microsoft's August 2026 Patch Tuesday addressed 398 security vulnerabilities, including CVE-2026-68820 (CVSS 7.0), an actively exploited zero-day in a Windows kernel driver handling network socket operations (afd.sys) that allows local privilege escalation to SYSTEM. Two additional vulnerabilities were publicly disclosed prior to patching. Security teams should prioritize the kernel driver fix immediately given active exploitation.

Read full article → https://thehackernews.com/2026/08/microsoft-patche…

Relevance score: 92.0/100

# More from August 12

2
Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks The Hacker News
3
DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt The Hacker News
4
Kimwolf v7 Android Botnet Makes HTTP/2 DDoS Traffic Look Like Legitimate Browsing The Hacker News
5
Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE The Hacker News
6
Zoom Annotation Flaws Could Let a Meeting Participant Hijack Another Attendee's Client The Hacker News
7
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine The Hacker News
8
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands The Hacker News
9
Researchers Built a Fake Crypto Startup and Hired Three Suspected North Korean IT Workers The Hacker News
10
A Malicious SIM Card Can Run Attacker Code Inside the Modems Behind Cellular IoT Devices The Hacker News