Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

The feed reports active exploitation of a Windows kernel driver privilege-escalation zero-day (CVE-2026-68820), a critical unauthenticated SharePoint exploit chain (CVE-2026-55040), malware and ransomware activity, supply-chain compromises, attacks against industrial infrastructure, and emerging threats involving AI agents, passkeys, IoT, and developer tooling. The most urgent items are the actively exploited Windows flaw, SharePoint unauthenticated RCE, and attacks affecting critical infrastructure and trusted software ecosystems.