Microsoft's August security update fixes a Windows flaw that attackers are already using in real-world attacks, alongside several other actively exploited vulnerabilities added to the US Cybersecurity and Infrastructure Security Agency's (CISA) watch list this month.

• What it is: A privilege-escalation flaw in the Windows Ancillary Function Driver for WinSock (CVE-2026-68820) is being actively exploited, alongside critical flaws affecting Progress LoadMaster, IBM Langflow, N-able N-central and Apache Tomcat.
• Who is affected: Any business running unpatched Windows devices or the affected third-party products.
• The risk: Attackers who exploit these flaws can gain elevated access to a device or system, often as a stepping stone to a wider breach or ransomware attack.
• What to do: Apply the latest Windows security updates and vendor patches as soon as possible. If you use Progress LoadMaster, N-able N-central or Apache Tomcat, confirm with your provider that patches have been applied.

We recommend businesses treat this month's updates as high priority and confirm patching has completed across all devices.