Cyber Security News

Hacking Editorial Brief — July 17, 2026

Microsoft Patches Record 570 Vulnerabilities, Two Actively Exploited

Microsoft's July 2026 Patch Tuesday addressed a historic 570 vulnerabilities across its product portfolio, including two actively exploited zero-days and one publicly disclosed flaw. The exploited vulnerabilities affect SharePoint Server (CVE-2026-56164) and Active Directory Federation Services, both enabling unauthorized access and remote code execution in active attack campaigns. CISA issued a supplemental alert urging immediate SharePoint hardening following confirmed exploitation in the wild. Hours after the patch release, a researcher published a functional Windows zero-day proof-of-concept affecting all supported desktop and server versions, following a disclosure dispute with Microsoft. Security researchers attribute the unprecedented vulnerability count to AI-driven bug hunting tools, marking a shift in how software flaws are being discovered at scale.

Scattered Spider Members Sentenced for Transport for London Attack

Two members of the Scattered Spider threat group—Owen Flowers and Thalha Jubair, both teenagers at the time of the attack—were sentenced to five and a half years in prison for hacking Transport for London in 2024. The cyberattack, which was live-streamed by the perpetrators, caused £29 million in losses and could have resulted in widespread operational disruption before TfL's IT team forcibly logged out all staff to contain the breach. The case represents one of the first significant prison sentences tied to Scattered Spider, a loosely organized collective known for social engineering and SIM-swapping tactics. Separately, BitSight released a threat actor profile on TeamPCP, a group that has compromised multiple developer and security tools including Trivy, KICS, and LiteLLM, with suspected ties to the Vect ransomware-as-a-service operation.

Sources: Bleeping Computer · The Hacker News · CISA · Help Net Security · BitSight