Patch Tuesday notes: Microsoft addresses six actively exploited zero-days.

Patch Tuesday: Microsoft released fixes for 58 vulnerabilities including six actively exploited zero-days. Security vendors reported notable malicious activity: Bitdefender observed a surge in LummaStealer distribution using the CastleLoader in-memory loader, and Mandiant detailed UNC1069 (a North Korean actor) conducting socially engineered, multi-tool campaigns against the cryptocurrency and DeFi sectors. The bulletin also notes vendor patching across Adobe/Intel/AMD/industrial vendors and a business acquisition—Sophos acquiring Arco Cyber.