{"id":28762,"date":"2026-07-20T07:35:58","date_gmt":"2026-07-20T07:35:58","guid":{"rendered":"https:\/\/www.stroople.com\/?p=28762"},"modified":"2026-07-20T07:49:15","modified_gmt":"2026-07-20T07:49:15","slug":"mardi-des-correctifs-reflechir-avant-dappliquer","status":"publish","type":"post","link":"https:\/\/www.stroople.com\/fr\/patch-tuesday-think-before-patching\/","title":{"rendered":"Patch Tuesday juillet 2026 : r\u00e9fl\u00e9chir avant de patcher"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"28762\" class=\"elementor elementor-28762\" wpc-filter-elementor-widget=\"1\" data-elementor-post-type=\"post\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-75a7e495 elementor-section-full_width elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"75a7e495\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-379ca332 syd-sticky-section-no\" data-id=\"379ca332\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-c67689e syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"c67689e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-3b2c3dd elementor-section-full_width elementor-section-height-min-height elementor-section-items-stretch elementor-reverse-tablet elementor-section-height-default syd-sticky-section-no\" data-id=\"3b2c3dd\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-4002b263 syd-sticky-section-no\" data-id=\"4002b263\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-4d0edb4 syd-sticky-section-no elementor-widget elementor-widget-ha-social-icons happy-addon ha-social-icons\" data-id=\"4d0edb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-social-icons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"ha-social-icons-wrapper \">\n\t\t\t\t\t\t\t<a href=\"https:\/\/www.linkedin.com\/build-relation\/newsletter-follow?entityUrn=7120442855684231170\" class=\"ha-social-icon elementor-repeater-item-f2b3d32  elementor-social-icon-linkedin ha-social-icon--network\">\n\t\t\t\t\t<i class=\"fab fa-linkedin\"><\/i>\t\t\t\t<\/a>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-7af1deef syd-sticky-section-no\" data-id=\"7af1deef\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-1e11c0f0 syd-sticky-section-no elementor-widget elementor-widget-post-info\" data-id=\"1e11c0f0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"post-info.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul class=\"elementor-inline-items elementor-icon-list-items elementor-post-info\">\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-repeater-item-5b276ce elementor-inline-item\" itemprop=\"datePublished\">\n\t\t\t\t\t\t<a href=\"https:\/\/www.stroople.com\/fr\/2026\/07\/20\/\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text elementor-post-info__item elementor-post-info__item--type-date\">\n\t\t\t\t\t\t\t\t\t\t<time>juillet 20, 2026<\/time>\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t<\/li>\n\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-42127c4d elementor-widget__width-initial syd-sticky-section-no elementor-widget elementor-widget-theme-post-title elementor-page-title elementor-widget-heading\" data-id=\"42127c4d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-title.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h1 class=\"elementor-heading-title elementor-size-default\">Patch Tuesday: Think Before You Patch<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-f87f821 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"f87f821\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-0e53a75 syd-sticky-section-no\" data-id=\"0e53a75\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-3deb2ab0 syd-sticky-section-no elementor-widget elementor-widget-theme-post-featured-image elementor-widget-image\" data-id=\"3deb2ab0\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"theme-post-featured-image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"640\" height=\"459\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg\" class=\"attachment-full size-full wp-image-28764\" alt=\"patch tuesday\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july-300x215.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july-230x165.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july-350x251.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july-480x344.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ae97c8b syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"ae97c8b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-064f662 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"064f662\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-496d655 syd-sticky-section-no\" data-id=\"496d655\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-15e5835 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"15e5835\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-02b8cb4 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"02b8cb4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Think before you patch. The idea sounds counterintuitive, because the natural reflex is to fix fast and fix everything. Yet the July 2026 Patch Tuesday proved the opposite: patching everything, in no particular order, has become the wrong reflex. That month, Microsoft fixed more than 600 flaws, an all-time record. But the only two actually being exploited that day scored 5.3 and 7.8 out of 10, while the dozens of critical flaws drew no attacker interest at all.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-85aaa28 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"85aaa28\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a94c4d0 syd-sticky-section-no\" data-id=\"a94c4d0\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6f58e2e syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6f58e2e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">A 5.3 Flaw Exploited, the Critical Flaws Ignored<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10ca4bd syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"10ca4bd\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>On patch day, attackers were exploiting a SharePoint flaw rated 5.3 and an AD FS flaw rated 7.8. The sixty-odd flaws classified as critical, by contrast, were under no known exploitation.<\/p>\n\n<p>This gap is not an anomaly, it is the rule. The CVSS score is a theoretical severity rating, from 0 to 10, measuring the potential danger of a flaw. It says nothing about the likelihood that the flaw will actually be exploited. Yet only a tiny minority of published flaws is ever used in a real attack.<\/p>\n\n<p>Patching by score alone therefore means running in the wrong direction. A better starting point exists: CISA&#8217;s KEV catalog lists actively exploited vulnerabilities, and CERT-FR flags those affecting the French landscape. These sources tell you what is actually on fire.<\/p>\n\n<p style=\"border-left: 4px solid #09025F; padding-left: 16px; margin: 24px 0;\"><strong>Key takeaway:<\/strong> a critical flaw that is never exploited is homework you can hand in late. A medium flaw under active exploitation is a fire.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-8e67fb7 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"8e67fb7\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-d6117cb syd-sticky-section-no\" data-id=\"d6117cb\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-35c7096 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"35c7096\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">When Your Antivirus Becomes the Front Door<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7fa5100 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"7fa5100\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>One of the month&#8217;s flaws, nicknamed RoguePlanet, targeted the engine of Microsoft Defender itself. It granted SYSTEM rights, meaning full control of the machine, within seconds. The tool meant to protect you became the tool that compromised you.<\/p>\n\n<p>The story carries a second lesson. A seller was offering this exploit on a criminal forum, escrow service included, promising administrator access in five seconds. Except that seven free exploits were already circulating publicly and the patch had shipped. The spectacular threat was, in reality, an already-obsolete product.<\/p>\n\n<p>Two accessible lessons follow. First, your security tools are an attack surface too: an antivirus, a firewall or a monitoring agent must be patched with the same rigour as everything else. Furthermore, not everything sold on the dark web is dangerous. Knowing how to tell a marketing pitch from a real threat saves you from mobilising an entire team over an already-fixed flaw.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ba6ade9 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"ba6ade9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">When Applying a Patch Brings Down Your Active Directory<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2bbc386 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"2bbc386\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The main operational risk of July 2026 came from no hacker at all. It came from the patches themselves, which activated a hardening phase of the Kerberos protocol. Legacy service accounts, still based on RC4 encryption, could stop working on reboot.<\/p>\n\n<p>A patch is not just a plug over a hole. It is a configuration change, with its own risk. Applied without testing, it can cause the very downtime the attacker failed to achieve. Bringing down your own Active Directory, on a Monday morning at reboot, remains an entirely avoidable outage.<\/p>\n\n<p>The same month illustrated a neighbouring risk. SharePoint Server 2016 and 2019 reached end of support on 14 July, the very day Microsoft shipped their final patch. For these versions, the question is no longer whether to patch, but whether to migrate. After that date, every new flaw stays open, permanently.<\/p>\n\n<p style=\"border-left: 4px solid #09025F; padding-left: 16px; margin: 24px 0;\"><strong>Key takeaway:<\/strong> the patch that protects and the patch that breaks are the same act. Only prior testing separates them.<\/p>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-687f0d4 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"687f0d4\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">A Volume That Will Not Come Back Down<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0051a04 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"0051a04\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The pace seen in July is not an accident but an underlying trend. Microsoft itself attributes the surge to an AI-assisted vulnerability discovery system. The Security Update Guide figures are unambiguous: the volume tripled between June and July 2026.<\/p>\n\n<div style=\"max-width:100%; margin:24px 0; font-family:inherit;\">\n<p style=\"font-weight:bold; color:#09025F; margin:0 0 4px 0;\">Unique vulnerabilities fixed by Microsoft (CVEs)<\/p>\n<p style=\"font-size:0.85em; color:#555; margin:0 0 16px 0;\">Source: Microsoft Security Update Guide, June and July 2026<\/p>\n<div style=\"display:flex; align-items:flex-end; gap:24px; min-width:0; height:200px; padding:0 8px;\">\n<div style=\"flex:1; min-width:0; display:flex; flex-direction:column; align-items:center; justify-content:flex-end; height:100%;\">\n<span style=\"font-weight:bold; color:#09025F; margin-bottom:4px;\">220<\/span>\n<div style=\"width:100%; max-width:120px; background:#00A7C4; height:35%; border-radius:3px 3px 0 0;\"><\/div>\n<span style=\"margin-top:8px; font-size:0.9em;\">June 2026<\/span>\n<\/div>\n<div style=\"flex:1; min-width:0; display:flex; flex-direction:column; align-items:center; justify-content:flex-end; height:100%;\">\n<span style=\"font-weight:bold; color:#09025F; margin-bottom:4px;\">628<\/span>\n<div style=\"width:100%; max-width:120px; background:#09025F; height:100%; border-radius:3px 3px 0 0;\"><\/div>\n<span style=\"margin-top:8px; font-size:0.9em;\">July 2026<\/span>\n<\/div>\n<\/div>\n<\/div>\n\n<p>This acceleration changes the game, because the same AI also helps attackers turn a patch into an exploit faster than before. The window between a flaw&#8217;s publication and its exploitation is shrinking. Consequently, patch processes sized for a rhythm of 200 flaws a month become the weak link against 600.<\/p>\n\n<p>The nature of the flaws matters as much as their number. In July 2026, elevation of privilege dominates by far, well ahead of remote code execution. In other words, most of these flaws are not used to get in, but to move up once inside: they are the second step of an attack, not the first.<\/p>\n\n<div style=\"max-width:100%; margin:24px 0; font-family:inherit;\">\n<p style=\"font-weight:bold; color:#09025F; margin:0 0 4px 0;\">July 2026 flaws by impact type (unique CVEs)<\/p>\n<p style=\"font-size:0.85em; color:#555; margin:0 0 16px 0;\">Source: Microsoft Security Update Guide, July 2026<\/p>\n\n<div style=\"display:flex; align-items:center; margin-bottom:8px;\"><span style=\"flex:0 0 200px; min-width:0; font-size:0.9em;\">Elevation of privilege<\/span><div style=\"flex:1; min-width:0;\"><div style=\"width:100%; background:#09025F; color:#fff; padding:5px 8px; border-radius:3px; font-size:0.85em;\">257<\/div><\/div><\/div>\n\n<div style=\"display:flex; align-items:center; margin-bottom:8px;\"><span style=\"flex:0 0 200px; min-width:0; font-size:0.9em;\">Remote code execution<\/span><div style=\"flex:1; min-width:0;\"><div style=\"width:65%; min-width:40px; background:#00A7C4; color:#fff; padding:5px 8px; border-radius:3px; font-size:0.85em;\">166<\/div><\/div><\/div>\n\n<div style=\"display:flex; align-items:center; margin-bottom:8px;\"><span style=\"flex:0 0 200px; min-width:0; font-size:0.9em;\">Information disclosure<\/span><div style=\"flex:1; min-width:0;\"><div style=\"width:42%; min-width:40px; background:#00A7C4; color:#fff; padding:5px 8px; border-radius:3px; font-size:0.85em;\">109<\/div><\/div><\/div>\n\n<div style=\"display:flex; align-items:center; margin-bottom:8px;\"><span style=\"flex:0 0 200px; min-width:0; font-size:0.9em;\">Denial of service<\/span><div style=\"flex:1; min-width:0;\"><div style=\"width:14%; min-width:40px; background:#00A7C4; color:#fff; padding:5px 8px; border-radius:3px; font-size:0.85em;\">35<\/div><\/div><\/div>\n\n<div style=\"display:flex; align-items:center; margin-bottom:8px;\"><span style=\"flex:0 0 200px; min-width:0; font-size:0.9em;\">Spoofing<\/span><div style=\"flex:1; min-width:0;\"><div style=\"width:12%; min-width:40px; background:#00A7C4; color:#fff; padding:5px 8px; border-radius:3px; font-size:0.85em;\">31<\/div><\/div><\/div>\n\n<div style=\"display:flex; align-items:center; margin-bottom:0;\"><span style=\"flex:0 0 200px; min-width:0; font-size:0.9em;\">Security feature bypass<\/span><div style=\"flex:1; min-width:0;\"><div style=\"width:8%; min-width:40px; background:#00A7C4; color:#fff; padding:5px 8px; border-radius:3px; font-size:0.85em;\">21<\/div><\/div><\/div>\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5a10691 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"5a10691\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">So How Do You Patch in the Right Order?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9973ed1 syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"9973ed1\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Three rules do most of the work. Before opening the deployment console, it is worth setting them down in writing.<\/p><ol><li><strong>Prioritise by real exploitation and exposure, not by score alone.<\/strong> A flaw exploited on an internet-facing server comes before a critical flaw on an isolated internal workstation.<\/li><li><strong>Deploy in waves:<\/strong> IT workstations, pilot group, general fleet, then servers. Test before you break.<\/li><li><strong>Write the urgency criterion before the incident, not during.<\/strong> A threshold defined in calm is worth a thousand rushed judgment calls under pressure.<\/li><\/ol><p>These rules then translate into concrete actions that this Patch Tuesday makes especially clear. First, prioritise the actively exploited SharePoint and AD FS vulnerabilities, and apply the hardening recommended by CISA, notably AMSI full-mode inspection and IIS machine key rotation. Next, verify the Defender engine version across all endpoints, including the network-isolated systems that automatic updates do not reach. Furthermore, the AD FS flaw deserves priority treatment and a review of administrator access logs for abnormal privilege escalation, since this component governs authentication between the internal network and the cloud. It is also worth anticipating what comes next: a SharePoint attack chain enabling unauthenticated remote code execution is due to be completed at the following Patch Tuesday, and the most advanced actors are already reconstructing it from the July patch. Pre-approving changes and testing in staging removes the emergency. Finally, migration of the now-unsupported SharePoint 2016 and 2019 must be planned without delay.<\/p><p>For an organisation subject to NIS2 or DORA, this discipline is not one good practice among others. Patch and vulnerability management is an explicit risk-management obligation.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6daa2cc syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6daa2cc\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Key Vulnerabilities Under Active Exploitation\n<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7dfe70d syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"7dfe70d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>The indicators below are drawn from public, verifiable sources (CISA KEV, Microsoft advisories). They are the actionable starting point for triage.<\/p>\n\n<table style=\"width:100%; border-collapse: collapse; margin:24px 0;\">\n<tr>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Indicator<\/th>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Type<\/th>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Context<\/th>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Source<\/th>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CVE-2026-56164<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">SharePoint, EoP<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Missing authentication for a critical function; actively exploited; federal remediation deadline 17 July 2026<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CISA KEV<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CVE-2026-56155<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">AD FS, EoP<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Privilege escalation; actively exploited; discovered by Microsoft DART; deadline 28 July 2026<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CISA KEV<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CVE-2026-58644<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">SharePoint, RCE<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Chained with CVE-2026-56164 in active exploitation; added to KEV 16 July 2026<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CISA KEV<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CVE-2026-50656<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Defender engine, EoP<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">RoguePlanet; grants SYSTEM; fixed in MMPE v1.1.26060.3008 (out-of-band, 9 July 2026)<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Microsoft advisory<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">CVE-2026-55040<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">SharePoint, auth bypass<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">JWT bypass; first stage of a two-part unauthenticated RCE chain; second stage expected August 2026<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Rapid7<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">MsMpEng.exe anomaly<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Hunting indicator<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Defender engine spawning unexpected child processes; hunt the 10 June to 9 July 2026 exposure window<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Vendor research<\/td>\n<\/tr>\n<\/table>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f3cfc36 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"f3cfc36\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Associated MITRE ATT&amp;CK Techniques<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-10ece2d syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"10ece2d\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Mapping the observed activity to MITRE ATT&#038;CK helps defence teams turn these vulnerabilities into detection and hunting priorities.<\/p>\n\n<table style=\"width:100%; border-collapse: collapse; margin:24px 0;\">\n<tr>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Technique ID<\/th>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Technique<\/th>\n<th style=\"background:#09025F; color:#fff; padding:8px; text-align:left;\">Relevance<\/th>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">T1190<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Exploit Public-Facing Application<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">SharePoint flaws enable unauthenticated remote exploitation of internet-facing servers<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">T1068<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Exploitation for Privilege Escalation<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">RoguePlanet (Defender), the AD FS flaw and LegacyHive all provide local escalation to SYSTEM or admin<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">T1550.001<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Use Alternate Authentication Material: Application Access Token<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">The SharePoint JWT bypass enables token forgery to impersonate any user, including administrators<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">T1552.004<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Unsecured Credentials: Private Keys<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">The exploitation chain steals IIS machine keys from compromised SharePoint servers for persistence<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">T1562.001<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Impair Defenses: Disable or Modify Tools<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">RoguePlanet exploits Defender&#8217;s own engine, subverting the primary endpoint protection control<\/td>\n<\/tr>\n<tr>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">T1505.003<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Server Software Component: Web Shell<\/td>\n<td style=\"padding:8px; border-bottom:1px solid #e0e0e0;\">Post-exploitation in the SharePoint pattern involves web shell deployment for persistent access<\/td>\n<\/tr>\n<\/table>\n\n<p>More than 600 flaws is not the problem. A process that cannot absorb them is. Think before you patch.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t<div class=\"elementor-element elementor-element-b88a8c4 e-flex e-con-boxed syd-sticky-section-no e-con e-parent\" data-id=\"b88a8c4\" data-element_type=\"container\" data-e-type=\"container\" data-settings=\"{&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-d7d1175 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"d7d1175\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">What Stroople Monitors on Your Behalf<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1bc9a4e syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"1bc9a4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<div class=\"standard-markdown grid-cols-1 grid [&amp;_&gt;_*]:min-w-0 gap-3\">\n<p class=\"font-claude-response-body break-words whitespace-normal leading-[1.7]\">Stroople&#8217;s Threat Exposure Management service combines EASM and data leak detection in a continuous monitoring program. In practice, Stroople tracks your external exposure across open and closed sources: compromised credentials, data surfacing on the dark web, misconfigured assets, orphaned access points at your suppliers. Each alert is qualified by analysts, then delivered with a clear remediation plan.<\/p>\n\n<\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2fdc1ba syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"2fdc1ba\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-955deee elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"955deee\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-d26a256 syd-sticky-section-no\" data-id=\"d26a256\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-667994b ha-infobox-media-dir-left syd-sticky-section-no elementor-widget elementor-widget-ha-infobox happy-addon ha-infobox\" data-id=\"667994b\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"ha-infobox.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\n\t\t\t\t\t<figure class=\"ha-infobox-figure ha-infobox-figure--image\">\n\t\t\t\t<img decoding=\"async\" width=\"640\" height=\"427\" src=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash.jpg\" class=\"elementor-animation-disable-animation attachment-medium_large size-medium_large wp-image-26068\" alt=\"External Attack Surface Management &amp; Data Leak Detection\" srcset=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash.jpg 640w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-300x200.jpg 300w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-18x12.jpg 18w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-230x153.jpg 230w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-350x234.jpg 350w, https:\/\/www.stroople.com\/wp-content\/uploads\/2025\/11\/a-c-fsy2bD7Pep8-unsplash-480x320.jpg 480w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/>\t\t\t<\/figure>\n\t\t\n\t\t<div class=\"ha-infobox-body\">\n\t\t\t<h2 class=\"ha-infobox-title\">External Attack Surface Management<\/h2>\n\t\t\t\t\t\t\t<div class=\"ha-infobox-text\">\n\t\t\t\t\t<p>See your exposure before attackers do. Know what's already compromised.<\/p>\n\t\t\t\t<\/div>\n\t\t\t\n\t\t\t<a class=\"ha-btn ha-btn--link\" href=\"https:\/\/www.stroople.com\/external-attack-surface-management\/\"><span class=\"ha-btn-text\">Learn more<\/span><\/a>\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-50574e7 syd-sticky-section-no\" data-id=\"50574e7\" data-element_type=\"column\" data-e-type=\"column\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div data-ha-element-link=\"{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/audit\\\/&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;}\" style=\"cursor: pointer\" class=\"elementor-element elementor-element-316f929 syd-sticky-section-no elementor-widget elementor-widget-counter\" data-id=\"316f929\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"counter.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-counter\">\n\t\t\t\t\t\t<div class=\"elementor-counter-number-wrapper\">\n\t\t\t\t<span class=\"elementor-counter-number-prefix\"><\/span>\n\t\t\t\t<span class=\"elementor-counter-number\" data-duration=\"2000\" data-to-value=\"75\" data-from-value=\"0\" data-delimiter=\",\">0<\/span>\n\t\t\t\t<span class=\"elementor-counter-number-suffix\">%<\/span>\n\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-862c5ee syd-sticky-section-no elementor-widget elementor-widget-text-editor\" data-id=\"862c5ee\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>of successful breaches start from publicly exposed assets.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-42f879c9 elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"42f879c9\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-2c8bfc12 syd-sticky-section-no\" data-id=\"2c8bfc12\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-6919a471 syd-sticky-section-no elementor-widget elementor-widget-heading\" data-id=\"6919a471\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Share:<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-7f905bc1 syd-sticky-section-no\" data-id=\"7f905bc1\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-28b6f900 elementor-share-buttons--skin-flat elementor-share-buttons--view-icon-text elementor-share-buttons--shape-square elementor-grid-0 elementor-share-buttons--color-official syd-sticky-section-no elementor-widget elementor-widget-share-buttons\" data-id=\"28b6f900\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;share_url&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;,&quot;custom_attributes&quot;:&quot;&quot;}}\" data-widget_type=\"share-buttons.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-grid\" role=\"list\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_x-twitter\" role=\"button\" tabindex=\"0\" aria-label=\"Share on x-twitter\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-x-twitter\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tX\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<div class=\"elementor-grid-item\" role=\"listitem\">\n\t\t\t\t\t\t<div class=\"elementor-share-btn elementor-share-btn_linkedin\" role=\"button\" tabindex=\"0\" aria-label=\"Share on linkedin\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__icon\">\n\t\t\t\t\t\t\t\t<i class=\"fab fa-linkedin\" aria-hidden=\"true\"><\/i>\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<div class=\"elementor-share-btn__text\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-share-btn__title\">\n\t\t\t\t\t\t\t\t\t\tLinkedIn\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-7652aef elementor-section-stretched elementor-section-boxed elementor-section-height-default elementor-section-height-default syd-sticky-section-no\" data-id=\"7652aef\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;stretch_section&quot;:&quot;section-stretched&quot;,&quot;_ha_eqh_enable&quot;:false}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-ed0df97 syd-sticky-section-no\" data-id=\"ed0df97\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-14be053 syd-sticky-section-no elementor-widget elementor-widget-spacer\" data-id=\"14be053\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"spacer.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<div class=\"elementor-spacer\">\n\t\t\t<div class=\"elementor-spacer-inner\"><\/div>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7a15561 syd-sticky-section-no elementor-widget elementor-widget-html\" data-id=\"7a15561\" data-element_type=\"widget\" data-e-type=\"widget\" data-no-translation=\"\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<style>.elementor-element-7a15561{display:none !important}<\/style>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-21f7c57 syd-sticky-section-no elementor-widget elementor-widget-html\" data-id=\"21f7c57\" data-element_type=\"widget\" data-e-type=\"widget\" data-no-translation=\"\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<script type=\"application\/ld+json\">{\"@context\":\"https:\/\/schema.org\",\"@type\":\"FAQPage\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"Faut-il patcher toutes les failles critiques en premier ?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Non. Le score CVSS mesure la gravit\u00e9 th\u00e9orique, pas la probabilit\u00e9 d'exploitation. Une faille critique qui n'est activement exploit\u00e9e par personne est moins urgente qu'une faille au score moyen activement exploit\u00e9e. Il faut prioriser avec le catalogue KEV de la CISA et les alertes du CERT-FR, puis l'exposition, puis le score.\"}},{\"@type\":\"Question\",\"name\":\"Qu'est-ce que le catalogue KEV de la CISA ?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Le catalogue des vuln\u00e9rabilit\u00e9s activement exploit\u00e9es (Known Exploited Vulnerabilities) est une liste maintenue par l'agence am\u00e9ricaine CISA des failles confirm\u00e9es comme exploit\u00e9es dans des attaques r\u00e9elles. C'est un bien meilleur point de d\u00e9part pour la priorisation des correctifs que le score CVSS seul, car il refl\u00e8te l'activit\u00e9 r\u00e9elle des attaquants.\"}},{\"@type\":\"Question\",\"name\":\"Un correctif peut-il casser mon syst\u00e8me ?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Oui. Un correctif est un changement de configuration, pas seulement une r\u00e9paration. En juillet 2026, la phase de durcissement Kerberos de Microsoft pouvait casser les comptes de service legacy en RC4 au red\u00e9marrage. Appliqu\u00e9 sans test, un patch peut provoquer l'indisponibilit\u00e9 que l'attaquant n'a pas r\u00e9ussi \u00e0 causer, d'o\u00f9 l'importance d'un d\u00e9ploiement par vagues.\"}},{\"@type\":\"Question\",\"name\":\"Pourquoi y a-t-il de plus en plus de failles chaque mois ?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Microsoft attribue cette explosion \u00e0 un syst\u00e8me de d\u00e9couverte de failles assist\u00e9 par IA. Le nombre de CVE uniques a tripl\u00e9, passant d'environ 220 en juin 2026 \u00e0 628 en juillet 2026. La m\u00eame IA aide aussi les attaquants \u00e0 transformer un correctif en exploit plus vite, r\u00e9duisant la fen\u00eatre entre publication et exploitation.\"}}]}<\/script>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Think before you patch. The idea sounds counterintuitive, because the natural reflex is to fix fast and fix everything. Yet the July [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":28764,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[114],"tags":[],"class_list":["post-28762","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security-operations-soc-detection"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Patch Tuesday: Think Before You Patch - Stroople<\/title>\n<meta name=\"description\" content=\"Patch Tuesday July 2026: a 5.3 flaw was exploited while 60 critical flaws sat idle. Why patching in the right order changes everything.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.stroople.com\/fr\/mardi-des-correctifs-reflechir-avant-dappliquer\/\" \/>\n<meta property=\"og:locale\" content=\"fr_FR\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Patch Tuesday: Think Before You Patch - Stroople\" \/>\n<meta property=\"og:description\" content=\"Patch Tuesday July 2026: a 5.3 flaw was exploited while 60 critical flaws sat idle. Why patching in the right order changes everything.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.stroople.com\/fr\/mardi-des-correctifs-reflechir-avant-dappliquer\/\" \/>\n<meta property=\"og:site_name\" content=\"Stroople\" \/>\n<meta property=\"article:published_time\" content=\"2026-07-20T07:35:58+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-07-20T07:49:15+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"459\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"STROOPLEADMINISTRATOR\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:site\" content=\"@Stroople1\" \/>\n<meta name=\"twitter:label1\" content=\"\u00c9crit par\" \/>\n\t<meta name=\"twitter:data1\" content=\"STROOPLEADMINISTRATOR\" \/>\n\t<meta name=\"twitter:label2\" content=\"Dur\u00e9e de lecture estim\u00e9e\" \/>\n\t<meta name=\"twitter:data2\" content=\"8 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/\"},\"author\":{\"name\":\"STROOPLEADMINISTRATOR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\"},\"headline\":\"Patch Tuesday: Think Before You Patch\",\"datePublished\":\"2026-07-20T07:35:58+00:00\",\"dateModified\":\"2026-07-20T07:49:15+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/\"},\"wordCount\":1412,\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/patch-tuesday-vulnerabilities-tripling-june-july.jpg\",\"articleSection\":[\"SecOps\"],\"inLanguage\":\"fr-FR\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/\",\"name\":\"Patch Tuesday: Think Before You Patch - Stroople\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/patch-tuesday-vulnerabilities-tripling-june-july.jpg\",\"datePublished\":\"2026-07-20T07:35:58+00:00\",\"dateModified\":\"2026-07-20T07:49:15+00:00\",\"description\":\"Patch Tuesday July 2026: a 5.3 flaw was exploited while 60 critical flaws sat idle. Why patching in the right order changes everything.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#breadcrumb\"},\"inLanguage\":\"fr-FR\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/patch-tuesday-vulnerabilities-tripling-june-july.jpg\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/patch-tuesday-vulnerabilities-tripling-june-july.jpg\",\"width\":640,\"height\":459,\"caption\":\"patch tuesday\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/patch-tuesday-think-before-patching\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Accueil\",\"item\":\"https:\\\/\\\/www.stroople.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Patch Tuesday: Think Before You Patch\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#website\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"name\":\"Stroople\",\"description\":\"Cybersecurity Expertise\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.stroople.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"fr-FR\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#organization\",\"name\":\"Stroople Cybersecurity\",\"alternateName\":\"Stroople\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"contentUrl\":\"https:\\\/\\\/www.stroople.com\\\/wp-content\\\/uploads\\\/2026\\\/05\\\/Logo-Stroople-responsive.png\",\"width\":1000,\"height\":1000,\"caption\":\"Stroople Cybersecurity\"},\"image\":{\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/Stroople1\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/stroople\\\/\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UC_kTnaswN04kjIrHU0Pi_qg\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.stroople.com\\\/#\\\/schema\\\/person\\\/a1eb93cbbffe1681999993af123a6d44\",\"name\":\"STROOPLEADMINISTRATOR\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"fr-FR\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g\",\"caption\":\"STROOPLEADMINISTRATOR\"},\"sameAs\":[\"https:\\\/\\\/stroople.com\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Mardi des correctifs : R\u00e9fl\u00e9chissez avant de patcher - Stroople","description":"Patch Tuesday juillet 2026 : une faille 5.3 a \u00e9t\u00e9 exploit\u00e9e tandis que 60 failles critiques sont rest\u00e9es inactives. Pourquoi le patch dans le bon ordre change tout.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.stroople.com\/fr\/mardi-des-correctifs-reflechir-avant-dappliquer\/","og_locale":"fr_FR","og_type":"article","og_title":"Patch Tuesday: Think Before You Patch - Stroople","og_description":"Patch Tuesday July 2026: a 5.3 flaw was exploited while 60 critical flaws sat idle. Why patching in the right order changes everything.","og_url":"https:\/\/www.stroople.com\/fr\/mardi-des-correctifs-reflechir-avant-dappliquer\/","og_site_name":"Stroople","article_published_time":"2026-07-20T07:35:58+00:00","article_modified_time":"2026-07-20T07:49:15+00:00","og_image":[{"width":640,"height":459,"url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg","type":"image\/jpeg"}],"author":"STROOPLEADMINISTRATOR","twitter_card":"summary_large_image","twitter_creator":"@Stroople1","twitter_site":"@Stroople1","twitter_misc":{"\u00c9crit par":"STROOPLEADMINISTRATOR","Dur\u00e9e de lecture estim\u00e9e":"8 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#article","isPartOf":{"@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/"},"author":{"name":"STROOPLEADMINISTRATOR","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44"},"headline":"Patch Tuesday: Think Before You Patch","datePublished":"2026-07-20T07:35:58+00:00","dateModified":"2026-07-20T07:49:15+00:00","mainEntityOfPage":{"@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/"},"wordCount":1412,"publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"image":{"@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg","articleSection":["SecOps"],"inLanguage":"fr-FR"},{"@type":"WebPage","@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/","url":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/","name":"Mardi des correctifs : R\u00e9fl\u00e9chissez avant de patcher - Stroople","isPartOf":{"@id":"https:\/\/www.stroople.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#primaryimage"},"image":{"@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#primaryimage"},"thumbnailUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg","datePublished":"2026-07-20T07:35:58+00:00","dateModified":"2026-07-20T07:49:15+00:00","description":"Patch Tuesday juillet 2026 : une faille 5.3 a \u00e9t\u00e9 exploit\u00e9e tandis que 60 failles critiques sont rest\u00e9es inactives. Pourquoi le patch dans le bon ordre change tout.","breadcrumb":{"@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#breadcrumb"},"inLanguage":"fr-FR","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/"]}]},{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#primaryimage","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/07\/patch-tuesday-vulnerabilities-tripling-june-july.jpg","width":640,"height":459,"caption":"patch tuesday"},{"@type":"BreadcrumbList","@id":"https:\/\/www.stroople.com\/patch-tuesday-think-before-patching\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Accueil","item":"https:\/\/www.stroople.com\/"},{"@type":"ListItem","position":2,"name":"Patch Tuesday: Think Before You Patch"}]},{"@type":"WebSite","@id":"https:\/\/www.stroople.com\/#website","url":"https:\/\/www.stroople.com\/","name":"Stroople","description":"Expertise en cybers\u00e9curit\u00e9","publisher":{"@id":"https:\/\/www.stroople.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.stroople.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"fr-FR"},{"@type":"Organization","@id":"https:\/\/www.stroople.com\/#organization","name":"Stroople Cybers\u00e9curit\u00e9","alternateName":"Stroople","url":"https:\/\/www.stroople.com\/","logo":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","contentUrl":"https:\/\/www.stroople.com\/wp-content\/uploads\/2026\/05\/Logo-Stroople-responsive.png","width":1000,"height":1000,"caption":"Stroople Cybersecurity"},"image":{"@id":"https:\/\/www.stroople.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/Stroople1","https:\/\/www.linkedin.com\/company\/stroople\/","https:\/\/www.youtube.com\/channel\/UC_kTnaswN04kjIrHU0Pi_qg"]},{"@type":"Person","@id":"https:\/\/www.stroople.com\/#\/schema\/person\/a1eb93cbbffe1681999993af123a6d44","name":"STROOPLEADMINISTRATEUR","image":{"@type":"ImageObject","inLanguage":"fr-FR","@id":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/cf565399cf069755c53f17b9c363d364247d5ad1c1bc3bc3ff3b9ff928b80411?s=96&d=mm&r=g","caption":"STROOPLEADMINISTRATOR"},"sameAs":["https:\/\/stroople.com"]}]}},"_links":{"self":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/28762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/comments?post=28762"}],"version-history":[{"count":7,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/28762\/revisions"}],"predecessor-version":[{"id":28770,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/posts\/28762\/revisions\/28770"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media\/28764"}],"wp:attachment":[{"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/media?parent=28762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/categories?post=28762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stroople.com\/fr\/wp-json\/wp\/v2\/tags?post=28762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}