Paul Baity

ACTIVELY EXPLOITED VULNERABILITIES Microsoft's July 2026 Patch Tuesday fixed a record ~570 flaws, including two actively exploited zero-days: CVE-2026-56155 (Active Directory Federation Services elevation of privilege granting admin rights) and CVE-2026-56164 (SharePoint Server EoP with a missing-authentication flaw enabling unauthenticated remote attack). A third, CVE-2026-50661 (BitLocker security feature bypass via physical access), was publicly disclosed but not yet exploited....

ACTIVELY EXPLOITED VULNERABILITIES Microsoft July 2026 Patch Tuesday fixed a record ~570 flaws, including two actively exploited zero-days: CVE-2026-56155 (Active Directory Federation Services, grants administrative privileges) and CVE-2026-56164 (SharePoint Server, elevation of privilege). 59 flaws rated Critical, 48 of them RCE. (BleepingComputer) CISA added four flaws to the KEV catalog on July 14, including CVE-2026-15409 (SonicWall SMA1000 SSRF) and CVE-2026-15410 (SonicWall SMA1000 code...

ACTIVELY EXPLOITED VULNERABILITIES ServiceNow AI Platform — Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, per threat intelligence firm Defused. Patch immediately. (SecurityWeek) SharePoint Server — CVE-2026-58644 was added to CISA's KEV catalog July 16 following active exploitation; CISA has urged SharePoint hardening, and the related FCEB patch deadline for the earlier SharePoint RCE (CVE-2026-45659) fell on July 19. Microsoft's July...