Microsoft Patches a Record 570 Security Flaws
2026-07-21T13:23:27Z•be4a88801b7bb67c89e2c9a45600649bbe5b777b89f81755ba1ec8a98da10c8b
AI support botAI-assisted discoveryAWS GovCloudAlarum TechnologiesCISAFBI seizureGitHub leakMetaMicrosoftNetNutPatch TuesdayPopa botnetRussia-linked infrastructureScattered SpiderThe Gentlemenaccount takeoverexposed credentialshosting seizurelaw enforcementoffensive security startupransomwareresidential proxysecrets managementvulnerabilitieszero-day marketplace
What happened
Multiple high-impact security developments: Microsoft released an unusually large Patch Tuesday (570 fixes in July; ~200 in June) including dozens of critical flaws and some with public exploit code, reportedly driven by AI-aided vulnerability discovery. CISA suffered a prolonged GitHub leak exposing internal credentials (including AWS GovCloud keys), highlighting poor secrets handling. Law enforcement moves include the FBI seizure of NetNut domains and disruption of the Popa Android botnet (millions of devices) linked to publicly traded Alarum Technologies, and Dutch seizures/arrests for ISP/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- krebs_on_security
- Record identifier
- be4a88801b7bb67c89e2c9a45600649bbe5b777b89f81755ba1ec8a98da10c8b
- Enrichment time
- 2026-07-21T13:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.