Patch [FIX] Tuesday – [The 570-CVE Month], Ep. 34

JUL 14, 202629 MIN

Description

570 vulnerabilities. That's July's Patch Tuesday count, nearly triple last month and a record by a wide margin.  Jason Kikta is joined by host Landon Miles and offensive-security researcher Serena DiPenti for the July 2026 rundown: An Active Directory Federation Services bug (CVE-2026-56155) already exploited in the wild, rated a deceptively low 7.8 A 9.8 DHCP client flaw (CVE-2026-49181) that reaches every Windows endpoint on the network An RDP bug you can shut down with a single setting, no patch required A SharePoint deserialization flaw (CVE-2026-50522) reachable by anyone with site-owner access A 9.9 Hyper-V escape that lets one compromised VM take the whole host A BitLocker bypass (6.1) worth knowing if you manage laptops in the field Plus why hacker summer camp turns every July into a bug dump, and what a 570-CVE release says about how much AI is really driving vulnerability discovery.