Patch [FIX] Tuesday – [973 CVEs and a New Patch Tuesday Record], Ep. 36

Patch [FIX] Tuesday – [973 CVEs and a New Patch Tuesday Record], Ep. 36

Labor Day is over and Microsoft made up for the day off. Landon Miles and Serena DiPenti sort September's Patch Tuesday down to the six bugs that matter, starting with the only one Microsoft confirms is already exploited: a Windows Update Stack privilege escalation that hands attackers SYSTEM, published with no score and no affected-product list.


They also cover:


- An unauthenticated remote code execution in Windows DNS Server, rated more likely to be exploited, and why it's a domain controller problem for most shops

- A Remote Desktop Services bug that scores 9.8 but carries an Important label, and why the label shouldn't set your patch order

- SQL Copilot in Management Studio ignoring its own read-only restrictions, and where the real guardrail belongs

- An Outlook flaw that fires from the Reading Pane with no click, and why a Microsoft 365 subscription doesn't mean the fix is already installed

- An Exchange Server bug that lets one low-privilege mailbox impersonate every other user


Plus macOS Tahoe 26.6.2 and what's behind the month's record CVE count. Know what you run, patch the exploited one first, then work down your list.

Det här avsnittet är hämtat från ett öppet RSS-flöde och publiceras inte av Podme. Det kan innehålla reklam.

Avsnitt(228)

Autonomous IT, Live! Turn to Face the StrAInge, Patch Speed vs AI Attacks, E08

Autonomous IT, Live! Turn to Face the StrAInge, Patch Speed vs AI Attacks, E08

In April, Jason Kikta and Dmitri Alperovitch landed on a structural conclusion: AI had collapsed patch-to-exploit time to under an hour, 1-10-60 was no longer fast enough, and the only answer was prev...

25 Aug 42min

Patch [FIX] Tuesday – [Race Conditions, Registry Hives, and Cloud CVEs], Ep. 35

Patch [FIX] Tuesday – [Race Conditions, Registry Hives, and Cloud CVEs], Ep. 35

August 2026 delivers the second-largest Patch Tuesday on record with nearly 400 CVEs, and Landon Miles, Jason Kikta, and Serena DiPenti sort out which ones actually matter. They start with the only ac...

11 Aug 22min

Secure IT – PKI, Certificates, and What Breaks When Trust Fails, E22

Secure IT – PKI, Certificates, and What Breaks When Trust Fails, E22

Public Key Infrastructure (PKI) underpins nearly every secure interaction in modern IT, but it's also one of the most misunderstood and overlooked foundations of security.In this episode of Secure IT,...

22 Juli 17min

Patch [FIX] Tuesday – [The 570-CVE Month], Ep. 34

Patch [FIX] Tuesday – [The 570-CVE Month], Ep. 34

570 vulnerabilities. That's July's Patch Tuesday count, nearly triple last month and a record by a wide margin. Jason Kikta is joined by host Landon Miles and offensive-security researcher Serena DiPe...

14 Juli 29min

 Executive IT – What IT hiring actually looks like when AI does the work, E07

Executive IT – What IT hiring actually looks like when AI does the work, E07

Eighteen months after the Hands-On IT podcast tackled the state of IT careers, Chelsea Rickey, SVP of Human Resources at Automox, comes back to the conversation to assess what held up, what changed, a...

1 Juli 15min

Product Talk – CISA's BOD 26-04 Directive Explained, E26

Product Talk – CISA's BOD 26-04 Directive Explained, E26

CISA's BOD 26-04 replaces severity-based patching with an exploit-evidence model and remediation clocks as short as three days, fleet-wide, no exceptions. Peter Pflaster and Jason Kikta unpack the fou...

11 Juni 27min

Patch [FIX] Tuesday – [Nothing Weaponized, Everything Exposed], E33

Patch [FIX] Tuesday – [Nothing Weaponized, Everything Exposed], E33

June 2026 has no headliner. Instead of one critical bug, the release spreads thin across the kernel, the network stack, a code editor, an AI assistant, a bootloader, and a nine-year-old Linux root bug...

9 Juni 23min

Populärt inom Politik & nyheter

aftonbladet-krim
svenska-fall
p3-krim
fordomspodden
rss-krimstad
politiken
en-runda-till
flashback-forever
aftonbladet-daily
rss-vad-fan-hande
rss-krimreportrarna
rss-sanning-konsekvens
rss-flodet
svd-ledarredaktionen
motiv
rss-frandfors-horna
omni-podd
rss-expressen-dok
rss-utopia-2
spar