ABOUT THIS EPISODE
![Patch [FIX] Tuesday – [The 570-CVE Month], Ep. 34](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-the-570-79nKDHSQPue-F4WS5kodNen.1400x1400.jpg "Patch [FIX] Tuesday – [The 570-CVE Month], Ep. 34")
570 vulnerabilities. That's July's Patch Tuesday count, nearly triple last month and a record by a wide margin.
Jason Kikta is joined by host Landon Miles and offensive-security researcher Serena DiPenti for the July 2026 rundown:
- An Active Directory Federation Services bug (CVE-2026-56155) already exploited in the wild, rated a deceptively low 7.8
- A 9.8 DHCP client flaw (CVE-2026-49181) that reaches every Windows endpoint on the network
- An RDP bug you can shut down with a single setting, no patch required
- A SharePoint deserialization flaw (CVE-2026-50522) reachable by anyone with site-owner access
- A 9.9 Hyper-V escape that lets one compromised VM take the whole host
- A BitLocker bypass (6.1) worth knowing if you manage laptops in the field
Plus why hacker summer camp turns every July into a bug dump, and what a 570-CVE release says about how much AI is really driving vulnerability discovery.
English
United States
IN THIS EPISODE
TRANSCRIPT 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
OTHER EPISODES IN THIS PODCAST
![Patch [FIX] Tuesday – April 2026 [Double Feature: SQL Another Day + XSS Never Dies], E30](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-april-2026-O4kCVQSa3AM-IMEj-icfFq8.1400x1400.jpg)
This month's Patch Tuesday drops a SQL Server elevation of privilege that hands attackers sysadmin access and an actively exploited SharePoint XSS flaw that requires no authentication.
SQL injection in the database engine. Cross-site scripting. In 2026...?
Ryan and Mat break down how these attack…
Claude Mythos dominated the AI security conversation for two weeks straight, from the Cloud Security Alliance's strategy briefing to sharp public skepticism to yesterday's Bloomberg report that unauthorized users on Discord have been accessing Mythos since its limited launch. Host Jason Kikta cuts …
![Patch [FIX] Tuesday – [AI Hits the Hat Trick], Ep. 32](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-ai-hits-L-V6Kt5mxXd-UKy4XROG1Lm.1400x1400.jpg)
The May 2026 Microsoft Patch Tuesday release looks quiet on the surface – no actively exploited zero-days, no public disclosures at release, and a CVE count below the four-month average. Don't let that fool you.
In this episode, Jason Kikta and Landon Miles break down everything that happened betwe…
![Patch [FIX] Tuesday – [Emergency Episode: DirtyFrag Exploit Before Patch], Ep. 31](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-emergency-VpTmW8Ds3Bk-j7mrAzMa1XO.1400x1400.jpg)
Breaking from the normal Patch Tuesday cadence for an emergency drop. On May 7, security researcher Hyunwoo Kim published a working proof-of-concept for DirtyFrag - a Linux kernel local privilege escalation chain that gets unprivileged users to root on every major distribution. The embargo was brok…
In this episode of Autonomous IT, Live!, we break down the widening gap between exploitation speed and remediation reality. Disclosed vulnerabilities keep climbing, exploitation windows keep shrinking, and IT and security teams are expected to absorb more risk without more resources. The traditiona…
Disclaimer: The podcast and artwork embedded on this page are from Automox, which is the property of its owner and not affiliated with or endorsed by Listen Notes, Inc.
EDIT
Thank you for helping to keep the podcast database up to date.
