Microsoft has released updates for an unprecedented 570 CVEs during this month\u2019s Patch Tuesday on July 14.<\/p>\n
The patch deluge came after warnings from the tech giant that its use of agentic AI to find new flaws would lead to an increase in security updates for customers<\/a>.<\/p>\n Trey Ford, chief strategy and trust officer at Bugcrowd, said this was the new normal for the foreseeable future.<\/p>\n \u201cThe real story is economic. AI has collapsed the cost of finding vulnerabilities, and this increase in volume is a new floor, not the ceiling \u2026 at least for a while,\u201d he added.\u00a0<\/p>\n \u201cLeadership teams need to stop treating patch volume as a monthly surprise, we must fund it as a fixed operating cost, because the intake will not be going back down for a while. The organizations that win won’t be the ones that patch fastest this month. They’ll be the ones who built a process that scales when the next couple months continue to increase.\u201d<\/p>\n Read more on vulnerability management: Anthropic Launches Project Glasswing to Use AI to Find and Fix Critical Software Vulnerabilities<\/a><\/p>\n Among the vulnerabilities in July\u2019s Patch Tuesday are three zero-day vulnerabilities; two of which have been exploited in the wild.<\/p>\n CVE-2026-56155 is an elevation of privilege (EoP) vulnerability in Active Directory Federation Services which allows an authorized attacker to elevate privileges locally.\u00a0<\/p>\n \u201cEight other vulnerabilities are also published today in Active Directory Federation Services, all ranked as Important on Microsoft\u2019s proprietary severity ranking scale,\u201d explained Rapid7 principal software engineer,\u00a0Adam Barnett.<\/p>\n \u201cThe advisory doesn\u2019t explicitly describe the location of the attacker, but it\u2019s likely that an attacker would need an existing toehold on the target system to chain together with the elevation of privilege opportunity on offer here.\u201d<\/p>\n The second exploited zero-day is CVE-2026-56164, another EoP bug but this time in Microsoft SharePoint Server. No existing privileges are required to launch an attack, and exploitation has been branded \u201clow complexity\u201d by Microsoft.<\/p>\n The US Cybersecurity and Infrastructure Security Agency (CISA) has urged organizations to harden their SharePoint systems<\/a> in response to exploitation of this and two other vulnerabilities published earlier this year.<\/p>\n The publicly disclosed zero day is CVE-2026-50661: a Windows BitLocker\u00a0security feature bypass flaw which could allow attackers to access encrypted data. Exploitation would require an unauthorized attacker to have physical access to a target machine.<\/p>\n A New Era of Mass Updates<\/p>\n In total, July\u2019s Patch Tuesday saw the release of updates for 254 EoP vulnerabilities, 145 remote code execution (RCE) bugs, and 102 information disclosure flaws. Fifty-nine were rated critical, of which the vast majority (48) were RCE flaws.<\/p>\n However, Microsoft isn\u2019t the only vendor to increase its volume of updates for users. Google fixed over 460 Edge\/Chromium flaws this month, and Adobe recently switched<\/a> its patching cadence to twice a month.<\/p>\n Qualys security research manager, Mayuresh Dani, commented, \u201cThis trend was predicted and we\u2019re seeing the evidence of it happening now. As more advanced and frontier AI models become available, we can expect an upward trend to continue and then slow down.\u201d<\/p>\n \u201cWhat we\u2019re observing is that AI automated fuzzing, LLM-assisted variant hunting, and static analysis at scale are discovering bugs faster than enterprises can remediate.\u201d<\/p>\n Qualys urged organizations to:<\/p>\n \tMove from CVSS-only prioritization to Exploit Prediction Scoring System<\/a> (EPSS) and CISA KEV<\/a>
\n\tGraduate to a tiered-patching SLA mechanism. For example, a KEV-listed CVE or EPSS >0.5 should be patched within 24-36 hours. Classification should be risk-based and will be different each organization\u00a0
\n\tIntroduce attack surface reduction and mitigation mechanisms, such as ensuring systems like Active Directory Federation Service aren\u2019t internet-connected, on-premises SharePoint doesn\u2019t have public access, and remote management tools aren\u2019t reachable from anywhere
\n\tImprove patching practices so it is easier to validate updates, and monitor installs and system stability on a select group with automated rollback support. Approved patches should then be pushed to all required systems<\/p>\n","protected":false},"excerpt":{"rendered":"Microsoft has released updates for an unprecedented 570 CVEs during this month\u2019s Patch Tuesday on July 14. The…\n","protected":false},"author":2,"featured_media":542488,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[85,46,125],"class_list":["post-542487","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-il","tag-israel","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/542487","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=542487"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/542487\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/542488"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=542487"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=542487"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=542487"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}