Microsoft Patches a Record 570 Security Flaws

Multiple KrebsOnSecurity reports covering a July 2026 surge in high-impact cyber events: Microsoft released a record 570 patches (Microsoft attributes the spike to AI-aided vulnerability discovery); CISA suffered a prolonged GitHub leak exposing internal credentials including AWS GovCloud keys; the FBI seized domains tied to NetNut and the Popa Android botnet, which researchers link to publicly-traded Alarum Technologies; Scattered Spider members pleaded guilty in a major 2024 Transport for London attack; researchers tied a prolific Popa botnet to a commercial proxy provider; a questionable ‘v