Loading feed…
Krebs on Security0 Hot0 comments5 min read
Microsoft Plugs Nearly 400 Security Holes – Krebs on Security
Microsoft's August Patch Tuesday addresses 398 security vulnerabilities, including 42 rated critical. One zero-day (CVE-2026-68820), a privilege escalation flaw in afd.sys, is actively being exploited via a race condition attack chain. Two other flaws were publicly disclosed before patching. The massive patch volume — double June's then-record batch — is attributed to AI-assisted vulnerability discovery. However, 1Password research found LLMs fail to correctly patch complex vulnerabilities more than half the time, producing broken or newly introduced flaws. Experts recommend human-in-the-loop testing, iterative improvement, and no rushed deployments. Adobe, Cisco, Google, Mozilla, and Oracle are also shipping patches more frequently due to AI-driven discovery.
Source: https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.
