Subscribe Share Full episode and show notes Vulnerability Management , Ransomware , AI/ML Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Josh Marpet,.. – SWN #597 Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Locutus, Josh Marpet, and More on this episode of the Security Weekly News. July 10, 2026 Full Segment Notes Borg, GitLost, ColdFusion, GodDamn, GhostApproval, OWA, Epaphroditus, Locutus, Josh Marpet, and More on this episode of the Security Weekly News. Hosts Doug White https://securedigitallife.com/ Joshua Marpet https://www.cyturus.com Announcements Every week there’s another breach tied to an unpatched vulnerability. And with thousands of new CVEs each year, most teams simply can’t keep up. So what actually deserves your attention? Join the Vulnerability Management Virtual Cybersecurity Summit on July 29th to hear how security teams are prioritizing real-world threats, reducing exposure, and staying ahead of exploitation. Security Weekly listeners can register for free at https://securityweekly.com/vulnmanagement using the promo code: CSS26-SW CyberRisk TV is proud to be an official media partner of Black Hat USA 2026! We'll be broadcasting live from the Black Hat LIVEWIRE Studio with executive interviews covering the latest cybersecurity trends, emerging threats, new technologies, and the conversations shaping the industry. Our Event Momentum Packages help your message reach security professionals long after the conference ends. Fewer than 10 interview opportunities remain, so visit https://securityweekly.com/exec today and reserve your spot before they're gone. List of Articles Doug White GitLost Exposes Agentic AI Data Exfiltration Risks CISA orders feds to patch max severity ColdFusion flaw by Friday ‘GodDamn’ ransomware deploys PoisonX driver to kill EDR ‘GhostApproval’ technique leads AI coding tools to alter files outside of sandbox Microsoft to switch off OWA Light after nearly two decades 15-Year-Old Linux Vulnerability ‘GhostLock’ Earns Researchers $92k From Google Why the tech industry wants to take away your screen Suspecting AI cheating, Ivy League prof ordered an in-person final; scores fell 50% Joshua Marpet Vulnerability Confusion – GhostApproval Anthropic initially declined the report as "outside our threat model," then it turned out their fix had already shipped February 5, nine days BEFORE Wiz's report arrived, and they later added explicit symlink warnings in 2.1.32. So "vendor rejected it" and "vendor patched it" are both technically true, and the real story is how messy coordinated disclosure gets when six vendors get the same bug. Show More Stay in the Know, No Smoke and Mirrors – Join Our Newsletter Get expert insights and technical breakdowns straight to your inbox. Join Now Related Segments Vulnerability Management Dune References, FAT, Claude, ZhiPu, PolinRider, RentaBot, Sony, Aaran Leyland & More – SWN #596 Vulnerability Management Beyond the AI Hype, Cyber Readiness in the Age of AI – Gibb Witham – SWN #595 Vulnerability Management AI Cocaine Recipes, Russian Hack, Scattered Spider, Cisco, Amazon Q – Aaran Leyland – SWN #594 Related Content Vulnerability Management HP DeskJet 2800 series printers vulnerable to sensitive data exposure Vulnerability Management Critical Gitea flaw allows authentication bypass via single HTTP header AI/ML Autonomous AI turns security risk into an MSP strategy issue You can skip this ad in 5 seconds