This month’s Windows update, KB5121003, includes the usual round of quality-of-life additions, Voice Isolation for Voice Access, better file size display in File Explorer, external fingerprint reader support for Windows Hello, but it also quietly patches something more serious: CVE-2026-68820, a kernel-level vulnerability that North Korea’s Lazarus Group has been actively exploiting since early July.
The campaign has specifically targeted defense-sector workers using fake job offers as the entry point. It’s worth being precise about the actual risk here: exploiting this flaw requires an attacker to already have some level of access to your machine, so it’s not a drive-by threat that puts the average PC gamer at risk just by browsing normally.
That said, it’s a confirmed, actively exploited vulnerability, not a theoretical one, and Microsoft’s own advisory recommends installing the update within three days rather than waiting. Even outside the specific threat of these patches, keeping current on security updates is good practice regardless.
One more date worth flagging while you’re checking for updates: Windows 11 24H2 Home and Pro editions reach the end of updates on October 13, 2026. If you haven’t moved to 25H2 yet, now is a reasonable time to start planning for it rather than waiting until the deadline.