Storm-1175, StormEncryptor and CVE-2026-18577: When the Patch Closes the Door and the Attacker Is Already Inside

Risk Summary CVE-2026-18577 was disclosed on 2 August 2026. That same day, Microsoft Threat Intelligence observed Storm-1175 begin deploying a previously undocumented ransomware family: StormEncryptor