Critical Security Threats Reported in ShareFile, U-Boot, and Microsoft Defender Alongside Cisco's New Patch Schedule

On July 13, 2026, the SANS Internet Storm Center reported a critical security threat affecting Progress Software’s ShareFile Server, urging users to manually shut down internet-exposed storage zone controllers due to an unresolved external risk with no available patch or configuration fix. The company had previously been targeted in ransomware incidents, and while an email notification was sent, no follow-up updates were publicly confirmed within the promised 24-hour window. Separately, Binarly disclosed multiple vulnerabilities in the U-Boot bootloader, commonly used in networking and IoT devices, which could enable persistent system compromise via malicious OS images; patches were provided but require vendor integration into firmware updates. Microsoft’s recent fix for the 'Rogue Planet' privilege escalation flaw in Defender was found to contain a bug allowing attackers to lock disk space, though exploitation is complex. Cisco announced a shift to biweekly patch releases—on the second and fourth Wednesdays of each month—with a 7-day advance notice, citing faster exploit development cycles driven by AI. The video also referenced an upcoming SANS Fire event in Washington, DC, discussing AI-enhanced honeypot improvements.