Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Microsoft released a security update containing 398 new vulnerabilities, with one zero-day flaw actively being exploited by Check Point Research's Lazarus group as part of Operation Dream Job. This zero-day (CVE-2026-68820) allows for SYSTEM-level privilege escalation, requiring an attacker to already have code running on the machine. Alongside this, four other vulnerabilities – all unauthenticated and requiring no user interaction – are present, including flaws in DNS Server, Deployment Services, QUIC, and HPC Pack. Microsoft is urging users to prioritize patching, particularly focusing on exposed services and on-premises SharePoint farms.