Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days

Microsoft's largest-ever Patch Tuesday highlights the accelerating pace of vulnerability discovery, now turbocharged by AI-assisted research. Two of the patched flaws — in Active Directory Federation Services and SharePoint Server — were actively exploited in the wild, meaning organizations that delayed patching were exposed to real-world attacks. The publicly disclosed BitLocker bypass further underscores that encryption controls can be undermined when underlying OS vulnerabilities go unpatched. This event illustrates that patch management is not a monthly checkbox but a continuous, risk-prioritized discipline, especially for identity and collaboration infrastructure that sits at the heart of enterprise environments.