Forensia CTI Core

Summary

Ingested excerpt (first ~500 chars of normalized text).

Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack Microsoft shipped its largest Patch Tuesday on record today, and two of the fixes close holes that attackers are already exploiting. The release covers 622 of Microsoft's own CVEs by its Security Update Guide count, more than triple June's previous high of around 200. Those two live bugs are the ones to grab first. Microsoft credits incident responders for both. Both are Microsoft…

https://thehackernews.com/2026/07/microsoft-patches-record-622-flaws.html

sha256:8425ce159256e8454c66a2cd85bd870a9c4842330c72f0d5e8c550ef581243da

What we pulled out

Deterministic extractor (IOC + allowlisted tokens + ATT&CK IDs present in DB).

cve9
md50
url0
ipv40
ipv60
sha10
domain0
sha2560
malware_token0
attack_pattern0
threat_actor_token1

Indicators

Linked with report → mentions → indicator. Values open the indicator workspace.

Type	Value	Link
cve	CVE-2026-56155	Open →
cve	CVE-2026-56164	Open →
cve	CVE-2026-55040	Open →
cve	CVE-2026-50661	Open →
cve	CVE-2026-57092	Open →
cve	CVE-2026-50522	Open →
cve

Malware families

Allowlist token matches only.

None extracted.

Threat actors mentioned

Allowlist mentions — not a formal attribution verdict.

Scattered Spider

ATT&CK techniques

MITRE IDs referenced in text and present in local technique table.

None linked (import ATT&CK or adjust text).

CONTINUE INVESTIGATION

High-signal pivots without leaving the thread you started in search.

All reports
Browse the report corpus.
Intel graph (first IOC)
Neighborhood from the first linked indicator.

← Back to reports