Microsoft's August security update fixes more than 400 issues, including a Windows flaw that is already being used in real attacks.

• What it is: This month's update addresses over 400 vulnerabilities across Windows, Office, and Exchange Server, including three zero-day flaws.
• Who is affected: Any business running Windows PCs, servers, Exchange, or Office applications that have not yet installed this month's updates.
• The risk: One of the zero-days, a Windows privilege escalation flaw, is already being exploited by attackers using fake job offer emails to break into networks and disable security tools.
• What to do: Install this month's Windows and Office updates as soon as possible. Microsoft itself is recommending installation within three days given the severity.

Businesses on OzComm's managed patching service will receive this update automatically. If you manage your own patching, we recommend prioritising it this week.