This week we’ve got a newly disclosed Windows privilege escalation technique that’s serious enough for Microsoft to begin investigating, attackers wasting no time exploiting a critical ServiceNow vulnerability in the wild, and Zoom urging customers to update against a critical account takeover flaw. To hear about this and much more, check out this week’s episode.
Episode 449 is available on Soundcloud:
On YouTube:
If you’d like to play the Podcast on a different podcast service such as Apple Podcasts or Spotify. You can find this episode at 5BytesPodcast.com
Reference Links:
News:
HiveLegacy Exploit Disclosed
https://arstechnica.com/security/2026/07/new-hivelegacy-windows-privilege-escalation-exploit-disclosed/
Out-of-Band Patch to Solve Dell Update Block
https://www.windowscentral.com/microsoft/windows-11/microsoft-issues-emergency-windows-11-kb5121767-update-to-address-unexpected-shutdowns-and-overheating-on-certain-dell-pcs
Yet Another WSUS Sync Issue
https://www.bleepingcomputer.com/news/microsoft/microsoft-shares-manual-fix-for-wsus-sync-delays-and-timeouts/
7-Zip Patched for Worrying RCE Vulnerability
https://www.bleepingcomputer.com/news/security/update-now-7-zip-fixes-rce-flaw-exploitable-with-malicious-archives/
Critical Severity Vulnerability in Zoom
https://www.bleepingcomputer.com/news/security/zoom-warns-of-critical-account-takeover-vulnerability/
ServiceNow Vulnerability Being Exploited in the Wild
https://www.bleepingcomputer.com/news/security/critical-servicenow-code-execution-flaw-now-exploited-in-attacks/
Coca Cola Discloses Ransomware Attack on Part of its Business
https://www.bleepingcomputer.com/news/security/coca-cola-says-fairlife-ransomware-attack-halts-us-dairy-production/
Windows Server 2022 Mainstream End of Support Announced
https://www.bleepingcomputer.com/news/microsoft/windows-server-2022-reach-end-of-mainstream-support-in-90-days/
Irish Government Puts a Halt on 1 Billion Microsoft Product Renewal
https://www.independent.ie/irish-news/government-pulls-1bn-tender-for-microsoft-services-after-interested-party-raises-matters-of-concern/a/158644288.html
23andMe Reach Settlement After 2023 Breach
http://bleepingcomputer.com/news/security/23andme-to-pay-18-million-in-new-genetics-data-breach-settlement/
New Policy to Automatically Accept SSO on Some Devices
https://www.helpnetsecurity.com/2026/07/16/windows-sso-policy-admin-control/
Windows 10 Market Share Remains Worryingly High
https://www.neowin.net/news/one-in-six-pcs-still-run-windows-10-and-theyre-far-less-secure-than-windows-11/
Airbus Moving Some of Its Workflows Off AWS due to Digital Sovereignty
Concerns
https://www.theregister.com/paas-and-iaas/2026/07/16/airbus-migrating-70-critical-apps-from-aws-to-frances-scaleway-amid-digital-sovereignty-push/
HP India Fined for Cartelization and Collusion
https://arstechnica.com/gadgets/2026/07/hp-fined-1-4-billion-rupees-for-cartelization-of-ink-cartridges-toner-pcs/
LibreOffice Blog About Microsoft’s Stranglehold on Office Applications
https://www.xda-developers.com/libreoffice-once-again-slams-microsoft-for-using-lock-in-with-office-files/
Microsoft Retiring Relatively New AI Feature
https://www.windowscentral.com/microsoft/microsoft-just-pulled-a-sony-the-tech-giant-will-get-rid-of-your-ai-created-podcasts-and-wont-let-you-save-them
OpenAI Claims Model Escaped Containment and Completed Security Attack
Completely Autonomously
https://www.rte.ie/news/business/2026/0722/1584512-openai-data-breach/
Spotify Have Removed 75 Million AI Tracks in 12 Months
https://www.gadgetreview.com/spotify-deleted-75-million-ai-generated-tracks-and-its-not-done-yet
