Episode Details

570 vulnerabilities. That's July's Patch Tuesday count, nearly triple last month and a record by a wide margin.

Jason Kikta is joined by host Landon Miles and offensive-security researcher Serena DiPenti (She Networks) for the July 2026 rundown:

• An Active Directory Federation Services bug (CVE-2026-56155) already exploited in the wild, rated a deceptively low 7.8
• A 9.8 DHCP client flaw (CVE-2026-49181) that reaches every Windows endpoint on the network
• An RDP bug you can shut down with a single setting, no patch required
• A SharePoint deserialization flaw (CVE-2026-50522) reachable by anyone with site-owner access
• A 9.9 Hyper-V escape that lets one compromised VM take the whole host
• A BitLocker bypass (6.1) worth knowing if you manage laptops in the field

Plus why hacker summer camp turns every July into a bug dump, and what a 570-CVE release says about how much AI is really driving vulnerability discovery.