Microsoft's July Update Patches 143 Flaws, Including Two Actively Exploited

Microsoft's monthly security updates address 143 vulnerabilities, including two actively exploited flaws: CVE-2024-38112 (an MSHTML spoofing issue abused via .URL/IE to deliver the Atlantida infostealer) and CVE-2024-38080 (a Hyper-V elevation-of-privilege). Check Point and other researchers observed campaigns delivering Atlantida via compromised WordPress sites using .HTA and PowerShell, targeting users in Turkey and Vietnam and possibly multiple financially motivated groups; additional high-severity RCE and privilege escalation bugs (including a zero-click Office RCE) were also patched.