[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8dvTcrPG38eCzabGyuFZVh9M9B-9WDs5Q2OpwxdeMx0":3},{"article":4,"iocs":53,"watch_terms":64,"solutions":65,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":30,"category":31,"article_tags":35},"d6d2e863-0dc8-4768-8e9a-bdbae800f383","Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days","microsoft-s-july-2026-patch-tuesday-fixes-622-flaws-and-2-exploited-zero-days-9a6bc9","Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action.","Microsoft's July 2026 Patch Tuesday update is its largest to date, fixing 622 vulnerabilities across its product suite. Three critical issues require immediate attention: two actively exploited flaws in Active Directory Federation Services (AD FS) and SharePoint Server, and a publicly disclosed BitLocker bypass. Microsoft attributes its increased vulnerability discovery rate to AI-assisted research.","Microsoft July 2026 Patch Tuesday addresses 622 CVEs, including two exploited zero-days.","https:\u002F\u002Fhackread.com\u002Fmicrosoft-july-2026-patch-tuesday-fixes-zero-days\u002F","https:\u002F\u002Fhackread.com\u002Fwp-content\u002Fuploads\u002F2026\u002F07\u002Fmicrosoft-july-2026-patch-tuesday-fixes-0-days.png","2026-07-15T11:56:59+00:00","2026-07-15T12:00:26.111274+00:00",9,[17,20,23,25,27],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"Active Directory Federation Services","product",{"name":24,"type":22},"SharePoint Server",{"name":26,"type":22},"BitLocker",{"name":28,"type":29},"AI","technology","80544778-fabb-4dcd-aa35-17492e5dcf4f",{"id":30,"icon":32,"name":33,"slug":34},null,"Vulnerabilities","vulnerabilities",[36,41,43,48],{"category":37},{"id":38,"icon":32,"name":39,"slug":40},"574f766a-fb3f-487c-8d2c-0720ae75471b","Zero-day","zero-day",{"category":42},{"id":30,"icon":32,"name":33,"slug":34},{"category":44},{"id":45,"icon":32,"name":46,"slug":47},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":49},{"id":50,"icon":32,"name":51,"slug":52},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[54,58,61],{"type":55,"value":56,"context":57},"cve","CVE-2026-56155","Exploited vulnerability in Active Directory Federation Services (AD FS).",{"type":55,"value":59,"context":60},"CVE-2026-56164","Exploited vulnerability in SharePoint Server.",{"type":55,"value":62,"context":63},"CVE-2026-50661","Publicly disclosed BitLocker bypass vulnerability.",[18,21,24],{"controls":66,"vendors":146},[67,96,120],{"slug":68,"name":69,"problem":70,"products":71},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",[72,80,88],{"vendor_slug":73,"vendor_name":74,"vendor_logo":75,"product_slug":76,"product_name":77,"url":78,"description":79},"rapid7","Rapid7","\u002Fvendor-logos\u002Frapid7.png","insightvm","Rapid7 Exposure Command (InsightVM)","https:\u002F\u002Fwww.rapid7.com\u002Fproducts\u002Finsightvm\u002F","Vulnerability scanning and risk-based prioritisation; InsightVM is now part of Exposure Command, alongside attack surface and cloud risk.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":84,"product_name":85,"url":86,"description":87},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","vmdr","Qualys VMDR","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fvulnerability-management-detection-response\u002F","Vulnerability management, detection and response with risk-based prioritisation.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-exposures","Axonius Exposures","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fexposures","Brings findings from different scanners together with asset and business context, to show what matters most and track fixes to the end.",{"slug":97,"name":98,"problem":99,"products":100},"patch-management","Automated patch management","Known holes get closed in days, not months.",[101,109,116],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":110,"vendor_name":18,"vendor_logo":111,"product_slug":112,"product_name":113,"url":114,"description":115},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":81,"vendor_name":82,"vendor_logo":83,"product_slug":97,"product_name":117,"url":118,"description":119},"Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"slug":121,"name":122,"problem":123,"products":124},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[125,133,138],{"vendor_slug":126,"vendor_name":127,"vendor_logo":128,"product_slug":129,"product_name":130,"url":131,"description":132},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":110,"vendor_name":18,"vendor_logo":111,"product_slug":134,"product_name":135,"url":136,"description":137},"defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":139,"vendor_name":140,"vendor_logo":141,"product_slug":142,"product_name":143,"url":144,"description":145},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",[147],{"slug":110,"name":18,"logo_path":111,"roles":148},[149,150],"affected","reported_by",{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":165},"record-breaking-patch-tuesday-622-flaws-including-two-actively-exploited-zero-days","Record-Breaking Patch Tuesday: 622 Flaws Including Two Actively Exploited Zero-Days","Microsoft's largest-ever Patch Tuesday highlights the accelerating pace of vulnerability discovery, now turbocharged by AI-assisted research. Two of the patched flaws — in Active Directory Federation Services and SharePoint Server — were actively exploited in the wild, meaning organizations that delayed patching were exposed to real-world attacks. The publicly disclosed BitLocker bypass further underscores that encryption controls can be undermined when underlying OS vulnerabilities go unpatched. This event illustrates that patch management is not a monthly checkbox but a continuous, risk-prioritized discipline, especially for identity and collaboration infrastructure that sits at the heart of enterprise environments.",[156,157,158,159,160,161,162,163,164],"CIS Control 7 – Continuous Vulnerability Management","CIS Control 2 – Inventory and Control of Software Assets","NIST SP 800-40 Rev. 4 – Guide to Enterprise Patch Management","NIST SI-2 – Flaw Remediation","NIST RA-5 – Vulnerability Monitoring and Scanning","NIST SC-28 – Protection of Information at Rest (BitLocker context)","ITIL Change Management – Emergency Change Process","MITRE ATT&CK T1190 – Exploit Public-Facing Application","MITRE ATT&CK T1548 – Abuse Elevation Control Mechanism (BitLocker bypass)",{}]