RF Wave

Microsoft released July 2026 patches and more - Jul 19, 2026

Microsoft released July 2026 software updates and more - weekly security news and updates roundup for July 12-19, 2026

  • vulnerability
  • data breach
  • Microsoft
  • 7-zip
  • OpenSSL
  • Coca-Cola
  • EY
  • Abbott Latoratories
  • Progress
  • MicrosoftSonicWall
  • Zoom
  • Anthropic
  • WordPress

Microsoft has released July 2026 software updates

The updates fix 570 security vulnerabilities in total, including 3 zero-day vulnerabilities.

This Week’s Updates

Breaches

  1. Coca-Cola confirms a ransomware attack on its Fairlife dairy subsidiary has disrupted operations and temporarily halted US production
  2. Ernst & Young discloses a data breach after attackers compromised a third-party support ticket system used by its IT personnel
  3. Abbott Laboratories confirms unauthorized access to internal Exact Sciences systems while investigating a separate extortion claim involving its LabCentral portal

Vulnerabilities

  1. Progress confirms a zero-day vulnerability caused the emergency ShareFile Storage Zone Controller shutdown and has released a patch
  2. SonicWall patches two SMA1000 vulnerabilities, CVE-2026-15409 and CVE-2026-15410, that were already being exploited as zero-days
  3. Zoom patches CVE-2026-53412, a critical, unauthenticated account takeover flaw in its Windows desktop client and SDK
  4. Anthropic acknowledges a flaw in its Claude for Chrome extension that let malicious extensions simulate clicks and trigger AI actions
  5. OpenSSL silently patches HollowByte, a flaw letting unauthenticated attackers bloat server memory with an 11-byte payload
  6. Public exploits emerge for WordPress Core’s critical “wp2shell” remote code execution flaws, with a patch now available
  7. 7-Zip patches a remote code execution flaw exploitable through specially crafted compressed archives