Attackers Already Exploiting Flaws in Microsoft's July Security Update

Microsoft's July security update addresses 139 vulnerabilities — including two zero-days (CVE-2024-38080 affecting Hyper‑V and CVE-2024-38112 affecting MSHTML, with at least one reported as actively exploited), three critical RCE flaws in the Remote Desktop Licensing Service (CVE‑2024‑38076/38077/38089, rated 9.8), and dozens of SQL Server issues; organizations are advised to prioritize installing patches and to disable unused services (e.g., Remote Desktop Licensing Service) while applying fixes.