Microsoft Patches a Record 570 Security Flaws

KrebsOnSecurity roundup (May–Jul 2026): Microsoft released record Patch Tuesday updates — 570 flaws in July (and ~200 in June), many rated critical and some with public exploit code, with Microsoft attributing the surge to AI-assisted discovery. CISA suffered a public GitHub leak where a contractor exposed dozens of internal credentials (including AWS GovCloud keys), prompting a critical postmortem and lessons on secrets management. Multiple stories link the Popa Android-based botnet (millions of compromised devices) to NetNut/Alarum Technologies; the FBI seized hundreds of NetNut-related/dom0