Cybersecurity & Data Protection
2
UPVOTE
thehackernews.com

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in a core Windows kernel driver that handles network socket operations. An attacker with code already running on a machine can use it to escalate to SYSTEM. That patch goes out first. The flaw is tracked as CVE-2026-68820 (CVSS score: 7.0) and is the only
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Carlos the great

Carlos the great

3h ago
2 0

Discussion

Say something first

It all starts with you—share your thoughts now.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

CA

Carlos

CarlosUpvoted 1h ago2 comments · 91 shares
user95550

Nirano

NiranoUpvoted 3h ago3 comments · 34 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Microsoft's Patch Tuesday Deluge Continues With August Updates

Security experts say prioritization should be the main focus for the August updates, not the massive CVE volume.
DR

Dark Reading

25m ago
0
krebsonsecurity.com
Microsoft Plugs Nearly 400 Security Holes

Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weaknes…
JA

jordan af

1h ago
0
thehackernews.com
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN T…

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threa…
TN

The Hacker News

9h ago
0
schneier.com
AI Genie in the Wild

When I give talks about AI genies, I use this sort of example as a hypothetical. It’s happened. The story is from Australia. Someone named Andrew tasked…
SS

Schneier on Security

11h ago
0
thehackernews.com
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Explo…

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5. 6‑Cyber that it said is focused on vulnerability research, penetration testing, and i…
TA

taylor??

13h ago
0
bleepingcomputer.com
US and South Korea warn of Gunra ransomware targeting govt agen…

U. S. federal agencies and South Korea's National Policy Agency warned government and critical infrastructure organizations worldwide to secure their systems a…
Carlos the great

Carlos the great

18h ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN T…

The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new social engineering campaign orchestrated by Russian nation-state threa…
TN

The Hacker News

9h ago
0
thehackernews.com
OpenAI Launches GPT-5.6-Cyber with Reduced Safeguards for Explo…

OpenAI on Monday unveiled a new cybersecurity-focused model called GPT‑5. 6‑Cyber that it said is focused on vulnerability research, penetration testing, and i…
TA

taylor??

13h ago
0
thehackernews.com
Hackers Breach Polish Power Plant Controls via Private Cellular…

Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the private cellular net…
TN

The Hacker News

20h ago
0
thehackernews.com
Shipping 10–50× More Code? Watch This Webinar on Securing AI-Sp…

AI is helping development teams produce far more code, far faster. But security teams still have to review vulnerabilities, manage dependencies, prioritize fix…
JA

jordan af

1d ago
0
thehackernews.com
Solidity Pro VS Code Extensions Steal Crypto Wallets, API Keys,…

Cybersecurity researchers have flagged a malicious Microsoft Visual Studio Code (VS Code) extension named Solidity Pro ("solidity-pro") that has been observed…
TN

The Hacker News

1d ago
0
thehackernews.com
OpenAI's Next AI Model Astra Shows Cyber Performance Strong Eno…

OpenAI has announced that it's pausing some "internal activities" involving its upcoming artificial intelligence (AI) model Astra after an internal evaluation…
TN

The Hacker News

1d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest