Microsoft released July 2026 patches and more - Jul 19, 2026

Featured

Microsoft has released July 2026 software updates

The updates fix 570 security vulnerabilities in total, including 3 zero-day vulnerabilities.

This Week’s Updates

Breaches

Coca-Cola confirms a ransomware attack on its Fairlife dairy subsidiary has disrupted operations and temporarily halted US production

Ernst & Young discloses a data breach after attackers compromised a third-party support ticket system used by its IT personnel

Abbott Laboratories confirms unauthorized access to internal Exact Sciences systems while investigating a separate extortion claim involving its LabCentral portal

Vulnerabilities

Progress confirms a zero-day vulnerability caused the emergency ShareFile Storage Zone Controller shutdown and has released a patch

SonicWall patches two SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410, that were already being exploited as zero-days

Zoom patches CVE-2026-53412, a critical, unauthenticated account takeover flaw in its Windows desktop client and SDK

Anthropic acknowledges a flaw in its Claude for Chrome extension that let malicious extensions simulate clicks and trigger AI actions

OpenSSL silently patches HollowByte, a flaw letting unauthenticated attackers bloat server memory with an 11-byte payload

Public exploits emerge for WordPress Core's critical "wp2shell" remote code execution flaws, with a patch now available

7-Zip patches a remote code execution flaw exploitable through specially crafted compressed archives