Feed aggregator

July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days

Malware Bytes Security - Wed, 07/15/2026 - 8:21am

Just one month ago, June 2026 Patch Tuesday broke Microsoft’s previous record with 206 CVEs and three zero‑days. July now triples that count, reinforcing that the era of “small” Patch Tuesdays may be over as AI‑driven vulnerability discovery ramps up.

The update includes 59 critical vulnerabilities, as well as three publicly disclosed zero-days. Microsoft classifies these as zero-days because information about the vulnerabilities became public before patches were available. Two are known to be actively exploited by attackers.

How to apply patches and check if you’re protected

These updates fix security problems and keep your Windows PC protected. Here’s how to make sure you’re up to date:

1. Open Settings

  • Click the Start button, then open Settings.

2. Go to Windows Update

  • Select Windows Update (usually at the bottom of the menu on the left).

3. Check for updates

  • Click Check for updates. Windows will search for the latest security updates.
  • If you’ve enabled Get the latest updates as soon as they’re available under More options, you may be prompted to restart immediately. If so, restart your computer to complete the update. Otherwise, continue to the next step.

4. Download and install

  • If updates are available, they’ll start downloading automatically. When they’re ready, click Install or Restart now if prompted. Your computer may need a restart to finish the update.

5. Double-check you’re up to date

  • After restarting, go back to Windows Update and check again. If it says You’re up to date, you’re all set.
Technical details

Let’s look at the three zero-days.

First is a Windows BitLocker security feature bypass vulnerability, tracked as CVE-2026-50661. It is not known to be actively exploited. Microsoft describes it as:

“Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.”

In other words, even if you’ve encrypted your machine with BitLocker, an attacker could exploit this vulnerability to access your data if they have physical access to your computer.

Next is the actively exploited CVE-2026-56155, an Active Directory Federation Services (ADFS) elevation of privilege (EoP) vulnerability. ADFS is a Microsoft software component that provides single sign-on (SSO) and federated access. It acts as a trust broker between an organization’s Active Directory and applications. An attacker who successfully exploited this vulnerability could gain administrator privileges. Reportedly, Microsoft discovered the vulnerability while investigating active attacks.

Last but not least is CVE-2026-56164, a Microsoft SharePoint Server elevation of privilege vulnerability. SharePoint Server is the on-premises version of Microsoft’s web-based collaboration and document management platform. A missing authentication check in Microsoft Office SharePoint could allow an attacker to elevate privileges over a network.

Both actively exploited vulnerabilities have been added to the Cybersecurity and Infrastructure Security Agency (CISA) Known Exploited Vulnerabilities (KEV) Catalog, which sets patch deadlines for Federal Civilian Executive Branch (FCEB) agencies. CISA has also urged organizations using SharePoint Server to implement hardening measures after the latest exploitations.

“One of the best cybersecurity suites on the planet.” 

According to CNET. Read their review

Categories: Malware Bytes

The Unfiltered Truth: What Air Purifiers Actually Catch

CNET Feed - Wed, 07/15/2026 - 8:12am
I connected with experts to find out where our air quality is headed, and if air purifiers are the breath of fresh air we need.
Categories: CNET

People's Picks TV Winners: These TV Brands Win for Screen Quality, Sound and Smarts

CNET Feed - Wed, 07/15/2026 - 8:00am
Upgrading your TV soon? One well-known TV brand is our readers' all-around favorite.
Categories: CNET

These Expert-Approved Smart Scales Can Read More Than Just Your Weight

CNET Feed - Wed, 07/15/2026 - 8:00am
A smart scale can weigh you, but it also provides additional biometric data.
Categories: CNET

US Charges Russian Individuals and Firms for Running Cybercrime Services

Security Week - Wed, 07/15/2026 - 7:58am

The suspects and their companies were previously sanctioned by the United States and its allies.

The post US Charges Russian Individuals and Firms for Running Cybercrime Services appeared first on SecurityWeek.

Categories: SecurityWeek

Astronauts Take First X-Rays In Space

SlashDot - Wed, 07/15/2026 - 7:33am
Categories: SlashDot

I reverse-engineered the three biggest agent-memory tools

Hacker News - Wed, 07/15/2026 - 7:23am

I spent weeks reading about how Cognee, Graphiti, and Neo4j's `agent-memory` build their agent memory architectures. They converged on the same heavy knowledge-graph design: an ontology, LLM extraction pipelines, deduplication, the works.

I really wanted to use them for my personal use case, but that looks like such a heavy setup that adds a lot of friction and silos. Plus, it feels like I just get my data trapped in their service, for not a ton of value.

That's why my "long-term memory" still lives in Obsidian, Readwise, and Google Drive, with per-project LLM wikis as the agent's memory. No infrastructure. And I'm fine with it.

They ship memory as a product, which, in my opinion, at a personal or small scale, is overkill. You can build the same "knowledge graph" experience via plain old `.md` files within an LLM wiki memory.

But still, graphs are strong, so I adapted the same architecture from the Cognee, Graphiti, and Neo4j `agent-memory` stacks to build a data-mining tool with just MongoDB, VoyageAI, and Gemini Flash. But I scoped it to a very particular problem and ontology domain to avoid the KG noise.

On the other end of the spectrum, if you want to ship a product at medium-to-large scale, it makes sense to start using monsters such as Neo4j, Zep, or HydraDB.

But I am curious: what is your long-term memory setup? Obsidian + LLM wikis vs. Cognee/Graphiti/Zep? Do you actually use tools such as Cognee or Zep?

In case you are curious about how Cognee, Graphiti, and Neo4j's `agent-memory` work under the hood, I wrote a full breakdown here: https://www.decodingai.com/p/unified-memory-from-scratch-knowledge-graphs

Comments URL: https://news.ycombinator.com/item?id=48919162

Points: 1

# Comments: 0

Categories: Hacker News

Pages