622 Microsoft Patches, Four Active Exploits, and Your Supply Chain Risk
622 Microsoft Patches, Four Active Exploits, and Your Supply Chain Risk
On 14 July 2026, Microsoft released 622 vulnerabilities in a single Patch Tuesday, the largest in company history. Buried within that release are two zero-day vulnerabilities actively exploited in the wild: CVE-2026-56164 (SharePoint Server privilege escalation) and CVE-2026-56155 (AD FS local privilege escalation), both confirmed by CISA’s Known Exploited Vulnerabilities catalogue. Two additional critical Remote Desktop Protocol vulnerabilities (CVE-2026-54990 and CVE-2026-56190) allow unauthenticated remote code…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.