Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack

AI Summary

Microsoft's July 2026 Patch Tuesday is the largest on record, covering 622 CVEs — more than triple June's previous high of ~200. Two vulnerabilities are under active exploitation: one in Active Directory and one in SharePoint Server, both flagged by incident responders. Security teams should prioritize these two zero-days immediately while developing a triage strategy for the remaining 60+ critical flaws.

Read full article → https://thehackernews.com/2026/07/microsoft-patche…

Relevance score: 92.0/100

# More from July 15

2
SonicWall warns of SMA1000 flaws exploited in zero-day attacks, patch now BleepingComputer
3
11 Old Microsoft-Signed Linux UEFI Shims Could Let Attackers Bypass Secure Boot The Hacker News
4
SAP Patches CVSS 9.9 NetWeaver ABAP Flaw That Could Expose or Modify Data The Hacker News
5
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials The Hacker News
6
Microsoft Maps Year-Long ShinyHunters-Linked Salesforce Data Theft Across Three Paths The Hacker News
7
Progress confirms ShareFile zero-day flaw behind Storage Zone shutdown BleepingComputer
8
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support The Hacker News
9
US unseals indictment against alleged operators of Russian bulletproof hosting service The Record
10
Multiple Jscrambler Packages Impacted by Supply Chain Attack SecurityWeek