SonicWall warns of active exploitation of two SMA 1000 zero-days

Multiple high-impact security developments: SonicWall confirmed active exploitation of two zero-days in SMA 1000 appliances (one enables arbitrary command execution). Microsoft released a record July Patch Tuesday with 621 CVEs, including two exploited zero-days and multiple critical fixes. Other notable items: U.S. Treasury sanctioned a VPN provider and a cryptor seller linked to ransomware operations; CISA added Cisco IOS CVE-2008-4128 to its KEV catalog; a new macOS infostealer (CrashStealer) uses signed apps to bypass Gatekeeper; attackers are using AI to generate custom PowerShell AD-reck