Patch Tuesday notes: Microsoft fixes a record 200 flaws.

Microsoft issued patches for a record 200 vulnerabilities including three publicly disclosed zero-days (two leaked by a disgruntled researcher, Nightmare Eclipse, and one DoS in HTTP.sys). Nightmare Eclipse also released a separate Windows local privilege escalation exploit targeting Microsoft Defender that researchers verified. Additionally, Rebora Security disclosed two critical flaws in the SiderAI and MaxAI Chrome extensions (combined installs >10M) that could allow full browser session compromise, arbitrary command invocation, account takeover, and OS file theft; business news notes Cyera raised $600M.