Loading story…
Microsoft and BeyondTrust published security updates covering multiple products, with Microsoft’s fixes referenced through the Microsoft Security Response Center update guide and a downstream advisory summarizing Microsoft security updates. A separate advisory also highlighted BeyondTrust security updates, indicating that both vendors released patches intended to remediate newly disclosed or tracked security issues affecting enterprise software environments.
The available references do not provide vulnerability identifiers, severity ratings, or confirmed exploitation details, but they indicate active vendor patch activity that security teams should review against deployed assets. Organizations using Microsoft or BeyondTrust products should validate exposure, prioritize applicable updates, and confirm normal vulnerability-management actions such as testing, deployment, and post-patch verification across affected systems.
See real exploitation activity before you spend the cycle.
6 events from the most recent confirmed update back to the earliest known activity.
The July 2026 Microsoft release included two critical remote code execution vulnerabilities emphasized for urgent patching: CVE-2026-58644 in SharePoint and CVE-2026-58608 in Windows Print Spooler. The report notes that most fixes require manual customer deployment rather than automatic cloud servicing.
In the July 2026 Patch Tuesday release, Microsoft highlighted CVE-2026-56164 in SharePoint Server and CVE-2026-56155 in AD FS as exploited in the wild, and CVE-2026-50661 as a publicly disclosed BitLocker security feature bypass without confirmed exploitation. These disclosures were part of the same July release.
Microsoft's July 2026 Patch Tuesday addressed approximately 570 vulnerabilities across its product ecosystem. The batch included three zero-days and affected Windows components, Office, SharePoint Server, Remote Desktop Services, Windows Admin Center, and other Microsoft software.
EG-FinCIRT published a BeyondTrust security updates roundup titled "BeyondTrust Security Updates - 07 July 2026." The supplied content does not include additional technical details about the updates.
EG-FinCIRT published a Microsoft security updates roundup titled "Microsoft Security Updates - 06 July 2026." The supplied content does not include underlying vulnerability details beyond the existence of the update post.
A BeyondTrust security advisory was published on the vendor's Trust Center security advisories page. The reference provides the publication timestamp but no further event details in the supplied content.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
7 references tracked. Mallory keeps watching after this page renders.
securityweek.com
Open sourcecybersecuritynews.com
Open sourcethezdi.com
Open sourceegfincirt-wpn.azurewebsites.net
Open sourceegfincirt-wpn.azurewebsites.net
Open sourcebeyondtrust.com
Open sourcemsrc.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft published Security Update Guide entries for **`CVE-2025-21263`**, **`CVE-2024-49016`**, **`CVE-2024-20671`**, and the older **`CVE-2021-28348`**, indicating active tracking and disclosure of multiple vulnerabilities across its product ecosystem. The referenced advisories come from Microsoft’s official MSRC channels, but the available records provide little public detail beyond the CVE identifiers and their presence in the update guide. The set of references points to ongoing Microsoft vulnerability management activity, with newer 2024 and 2025 advisories appearing alongside a prior 2021 entry in the same update infrastructure. Organizations that rely on Microsoft platforms should use the CVE records as authoritative placeholders for patch validation and asset review, and monitor the corresponding MSRC pages for severity, affected products, and remediation guidance as fuller advisory details become available.
Jul 12, 2026Microsoft's Security Update Guide published entries for **`CVE-2026-34329`**, **`CVE-2026-42945`**, and **`CVE-2026-9123`**, alongside a product advisory entry for **`CVE-2021-33771`**. The referenced pages indicate that Microsoft added or maintained vulnerability records in its official advisory portal, but the available source material does not include vulnerability names, affected products, severity ratings, exploitation status, or remediation details. The set of references points to ongoing tracking of multiple Microsoft vulnerability identifiers through the company's security advisory infrastructure rather than a single disclosed intrusion or exploit campaign. Organizations that rely on Microsoft products should use the Security Update Guide entries for those CVEs to confirm affected assets, review patch availability, and determine whether any associated mitigations or product-specific guidance have been issued.
Jul 12, 2026
Microsoft published Security Update Guide entries for **`CVE-2024-49006`**, **`CVE-2025-21237`**, and **`CVE-2021-38000`**, indicating vendor-tracked vulnerabilities affecting Microsoft products. The referenced advisories and vulnerability pages were listed through the Microsoft Security Response Center (MSRC), but the provided records did not include public synopses describing the affected components, vulnerability classes, or exploitation details. The available information shows these CVEs were formally cataloged in Microsoft's update infrastructure across separate advisory pages, signaling that remediation or product guidance exists within MSRC's vulnerability management process. Because the supplied references contain no technical summary, organizations would need to review the individual MSRC entries directly to determine severity, impacted products, patch availability, and any required mitigation steps.
Jul 12, 2026