Security Signal Weekly: July 11-17, 2026

OverviewThis one is landing Sunday instead of Friday. Friday got away from me, but the security news did not slow down while I caught up. The clearest pattern was pressure on the systems that concentrate trust: identity servers, SharePoint, security appliances, file-sharing controllers, developer pipelines, browsers, and the libraries sitting underneath internet services.Reality check: A late roundup is still useful if it sends you back to the right consoles. Start with the exploited systems you actually run, verify the fixes landed, and then work outward into hardening and hunting.Top 10 Security Signals1. Microsoft’s largest Patch Tuesday put two exploited zero-days at the front of the queueWhat happened: Microsoft’s July release was enormous. BleepingComputer’s Microsoft-only count came to 570 vulnerabilities, including 59 critical issues and three zero-days. Two were already being exploited, including CVE-2026-56155 in Active Directory Federation Services, while Microsoft’s…