Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one month

A multi-article roundup: Microsoft released a record July 2026 Patch Tuesday with 621 CVEs (including two reported exploited zero-days and critical flaws impacting SharePoint, RDP, Hyper-V and AD FS). The U.S. Treasury sanctioned a VPN provider and a cryptor seller for enabling major ransomware campaigns. Other notable stories: AI-generated PowerShell recon malware used to map Active Directory; a malware outage at Japan’s largest taxi operator Nihon Kotsu; a new macOS infostealer “CrashStealer” using signed apps to bypass Gatekeeper; Lidl notified customers of a third‑party data breach; CISA/