Microsoft ayaa Talaadadii soo saartay cusboonaysiinteeda amniga ee billaha ah, taas oo lagu xiray 398 dalool oo cusub sida ay tirisay Zero Day Initiative. Daloolladaas, 62 ka mid ah ayaa lagu qiimeeyay kuwo aad u halis ah. Tiradu waxay muujinaysaa baaxadda cusboonaysiinta, balse xaaladda weerarka iyo sida adeeggu u furan yahay ayaa go’aaminaya kala horraynta dayactirka. Mudnaanta koowaad waxaa leh CVE-2026-68820, oo ah dalool ku jira qayb muhiim ah oo ka tirsan kernel-ka Windows. Waa daloolka keliya ee cusboonaysiintan ku jira ee Microsoft ay sheegtay in si firfircoon looga faa’iidaysanayo. Inkasta oo qiimayntiisa CVSS ay tahay 7.0, isticmaalka weerarrada socda ayaa ka dhigaya mid ka horreeya daloollo kale oo dhibco sare leh. Check Point Research ayaa sheegtay in daloolku yahay cillad nooca use-after-free ah oo ku jirta afd.sys, oo ah Ancillary Function Driver for WinSock kana shaqaysa dhinaca kernel-ka ee isku-xirka Windows. Ka faa’iidaysigiisu wuxuu ku xiran yahay kicinta race condition. Weeraryahanku waa inuu marka hore barnaamij ku dhex socodsiiyaa kombiyuutarka, dabadeedna wuxuu daloolka u adeegsan karaa inuu gaaro awoodda SYSTEM. Microsoft si rasmi ah uma sheegin cidda ka dambaysa weerarrada. Hase yeeshee, Check Point Research ayaa sheegtay in kooxda Lazarus ay daloolkan ku adeegsatay ololaheeda “Operation Dream Job”. Cusboonaysiintu waxay kaloo xirtay afar dalool oo fulinta koodhka meel fog ah, kuwaas oo mid kasta lagu qiimeeyay 9.8. Weeraryahanku uma baahna akoon, eray sir ah ama tallaabo uu qaado qofka la beegsanayo. Daloolladani waxay saameeyaan Windows DNS Server, Windows Deployment Services, hirgelinta Microsoft ee hab-maamuuska QUIC iyo High Performance Computing Pack. Midkoodna looma aqoonsan mid si firfircoon looga faa’iidaysanayo markii cusboonaysiinta la soo saaray. HPC Pack si caadi ah uguma rakibna Windows. Mudnaanta dhabta ah ee afarta dalool waxay ku xiran tahay in adeegga nugul uu rakiban yahay iyo in laga gaari karo shabakadda. Sidaas darteed, hay’aduhu waa inay hubiyaan adeegyada ay adeegsadaan iyo kuwa bannaanka u furan marka ay qorshaynayaan dayactirka. Cusboonaysiinta Agoosto waxay sidoo kale dhammaystiraysaa xal laba qaybood ah oo loogu talagalay SharePoint-ka lagu maamulo xarumaha hay’adaha. Rapid7 Labs ayaa 18-kii Maajo Microsoft u gudbisay silsilad weerar oo isku daraysay ka gudbidda aqoonsiga iyo dalool fulin koodh. Microsoft ayaa xaqiijisay laba maalmood kaddib inay dayactirka u kala qaybinayso Luulyo iyo Agoosto. Cusboonaysiintii Luulyo waxay xirtay CVE-2026-55040, halka tan Agoosto ay xirtay qaybta fulinta koodhka ee CVE-2026-63520. Labada dalool oo la isku daro ayaa suuragelinayay fulinta koodhka meel fog iyada oo aan la gelin aqoonsi. Maamulayaasha nidaamyada Soomaaliyeed ee adeegsada Windows ama SharePoint waxay kala horrayn karaan CVE-2026-68820, adeegyada DNS, WDS, QUIC iyo HPC ee bannaanka u furan, dabadeedna xaqiijin karaan in SharePoint la geliyay cusboonaysiinnadii Luulyo iyo Agoosto.