Đang tải bảng tin…
Krebs on Security0 Hot0 bình luận5 phút đọc
Microsoft Plugs Nearly 400 Security Holes – Krebs on Security
Microsoft's August Patch Tuesday addresses 398 security vulnerabilities, including 42 rated critical. One zero-day (CVE-2026-68820), a privilege escalation flaw in afd.sys, is actively being exploited via a race condition attack chain. Two other flaws were publicly disclosed before patching. The massive patch volume — double June's then-record batch — is attributed to AI-assisted vulnerability discovery. However, 1Password research found LLMs fail to correctly patch complex vulnerabilities more than half the time, producing broken or newly introduced flaws. Experts recommend human-in-the-loop testing, iterative improvement, and no rushed deployments. Adobe, Cisco, Google, Mozilla, and Oracle are also shipping patches more frequently due to AI-driven discovery.
Nguồn: https://krebsonsecurity.com/2026/08/microsoft-plugs-nearly-400-security-holes. 8 Sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
