Microsoft’s massive Patch Tuesday releases continue as AI reshapes bug discovery

Microsoft released fixes for 419 vulnerabilities (62 critical, 357 important) — one of the largest monthly tallies — including three zero-days; one zero-day (CVE-2026-68820) was observed exploited in the wild and Microsoft attributed active attacks to the Lazarus Group using trojanized PDF readers to target job applicants, while the report warns that AI-driven vulnerability discovery has dramatically increased the volume of flaws defenders must triage.