Microsoft’s monthly Patch Tuesday is first in 6 months with no actively exploited zero-days

Feed of CyberScoop stories (Mar 6–10, 2026): Microsoft released its March Patch Tuesday with 83 fixes and — for the first time in six months — no publicly reported actively exploited zero‑days; Microsoft flagged six of the 83 as more likely to be exploited. Researchers disclosed a critical vulnerability in the widely used Java security library pac4j that poses serious downstream/supply‑chain risk (no widespread exploitation observed so far). Microsoft also warned North Korean threat actors are using generative AI to scale fake‑worker recruitment schemes. The FBI emphasized that basic cyber‑hyg