● MEDIUM/ JULY 15, 2026TODAY’S BRIEFING — #117
Critical zero-days in Microsoft Active Directory, SonicWall SMA1000, GitHub malware campaign
Microsoft patches record 622 flaws including two zero-days in Active Directory and SharePoint under active attack. SonicWall confirms exploitation of SMA1000 zero-days. GitHub supply-chain attack spreads 300 fake repositories with infostealer malware.
CVE-2026-15409SonicWall SMA1000 — Zero-day actively exploited in the wild; patch releasedCVE-2026-15410SonicWall SMA1000 — Zero-day actively exploited in the wild; patch releasedCVE-2026-44747SAP NetWeaver Application Server ABAP — Out-of-bounds write (CVSS 9.9); allows data exposure or modification; patched
Read the full briefing →