Two Scattered Spider Members Sentenced to 5.6 Years Over TfL Cyberattack

Collection of July 14–16, 2026 security news: Microsoft’s July Patch Tuesday addresses 622 CVEs including exploited Active Directory Federation Services and SharePoint flaws and a disclosed BitLocker bypass; Kaspersky reports OkoBot malware targeting crypto users via fake software and hidden browser extensions to steal wallet files, seed phrases and credentials; a one‑click “PromptFiction” flaw in Claude Desktop enabled auto-submitted hidden prompts exposing chats and enabling code execution on some systems; Upwind documents a coordinated supply‑chain compromise of multiple AsyncAPI npm packs;