Microsoft Patches 570 CVEs in Record Patch Tuesday

Microsoft released updates for 570 CVEs on July 14, including three zero-days (two confirmed exploited in the wild) affecting Active Directory Federation Services, SharePoint Server, and BitLocker; the bulletin details large counts of elevation-of-privilege, remote code execution, and information disclosure flaws and includes vendor and researcher guidance to adopt EPSS/KEV-based prioritization, tiered patching SLAs, and attack-surface mitigations.