A critical mass of vulnerabilities emerged last week, with a Shark vacuum flaw compromising camera feeds, home maps, and Wi-Fi passwords. Meanwhile, security updates were released for multiple high-profile vendors, including Adobe, Chrome, Firefox, VMWare, and Zoom. Notably, the July 2026 Patch Tuesday addressed 622 Microsoft CVEs, including three zero-days, underscoring the urgent need for swift patching1. Other significant threats included a Claude for Chrome flaw that could grant rogue extensions access to Gmail accounts, as well as a fake Apple app capable of unlocking Mac password vaults. Scammers were also found to be exploiting FaceTime to drain bank accounts. The sheer volume and severity of these vulnerabilities underscore the imperative for prompt risk assessment and mitigation. So what matters most to practitioners is that the window for patching these vulnerabilities is rapidly shrinking, making immediate exposure assessment crucial.
A week in security (July 13 – July 19)
⚡ High Priority
Why This Matters
Zero-day activity targeting Microsoft means patching windows are already closing — assess your exposure immediately.
References
- Malwarebytes Labs. (2026, July 20). A week in security (July 13 – July 19). *Malwarebytes*. https://www.malwarebytes.com/blog/news/2026/07/a-week-in-security-july-13-july-19
Original Source
Malwarebytes Labs
Read original →