Microsoft patches 421 bugs; Lazarus exploits zero-day

Microsoft addressed 421 bugs in its Patch Tuesday release, about 200 fewer CVEs than last month. North Korea's Lazarus Group exploited CVE-2026-68820, a use-after-free in the Windows Ancillary Function Driver for WinSock, as a zero-day in early June.