Patch

So review your API access controls and usage logging there as well.

Yesterday, a few days ago, was Patch Tuesday.

And some patches didn't make it in time for us here on the show to talk about them.

One of those is the ICS Patch Tuesday.

So we know what water facilities are getting chased down by the Iranians.

So pay close attention to Schneider Electric's CVSS 9.2 Siemens S4 criticals and Rockwell RS links.

Then they just patched it again, and he did it again.

Nope, your patch is still crap.

And I think each time he waited until just after Patch Tuesday to do that.

Yes,

yes,

And it's gotta be right.

The first time now, can I help us? Sure.

Um, is it great at being a hundred, helping us be a hundred percent accurate? Not necessarily, uh, And I think that's where we have a lot of work to do to enable AI for defenders to keep up with this onslaught, Jeff, right? This is the Patch Tuesday where I think we're really kind of feeling the...

Then they just patched it again, and he did it again.

Nope, your patch is still crap.

And I think each time he waited until just after Patch Tuesday to do that.

Yes,

yes,

And it's gotta be right.

The first time now, can I help us? Sure.

Um, is it great at being a hundred, helping us be a hundred percent accurate? Not necessarily, uh, And I think that's where we have a lot of work to do to enable AI for defenders to keep up with this onslaught, Jeff, right? This is the Patch Tuesday where I think we're really kind of feeling the...

[laughs]

Um, no. Um, but we did have Patch Tuesday, and I remember last week-

Oh, my God, did we have a Patch Tuesday.

Yeah.

Hoo.

Um- Maybe they're just doing it for me to shut me the hell up, but, um, but either way I don't care.

It's fine.

Um, and then yesterday, which was Patch Tuesday, but ahead of the Patch Tuesday releases, Microsoft announced, you know, five Windows Insider builds because, you know, let's keep everyone busy.

Hey everyone, it's Patch Tuesday and Microsoft setting an all-time record nine hundred and seventy-four vulnerabilities, two already exploited in the wild.

FortiGate firewalls are actively compromised with a Node.js RAT that's decrypting your VPN credentials and exfiltrating Exchange mailboxes.

White Hat hackers draining three hundred and twenty million dollars from the Liquid Bitcoin network via a software bug.

It's September ninth, twenty twenty-six.

We've got 12 stories, and I wanna flag right away that today's lineup cuts across more than the usual vulnerability and kind of breach territory.

Yes, we have the biggest Patch Tuesday in Microsoft history.

Yes, we have an active FortiGate campaign hitting US organizations right now.

But we're also spending real time on a three hundred and twenty million dollar blockchain exploit and an AI credential theft campaign because both have business risk implications that practitioners need to be bringing into their executive team and boardroom, not just our SOC.

Sure.

So this week, just yesterday on September 8th, Microsoft announced its largest Patch Tuesday ever, in which they released patches to fix over 950 vulnerabilities.

Now, if you've been listening for a while, you know that we've warned about the number of vulnerabilities that will be discovered in the future and are currently being discovered by frontier AI models, which Microsoft is using their own version of.

And you'll likely also remember our recent episode in July where we spoke about Microsoft's largest Patch Tuesday ever, and that was the largest one at the time.

But back in July, they announced fixes for over 570 flaws, being the largest.

Well, just yesterday they fixed over 950, a staggering increase in volume here.

So Alex, I just wanna kick things off and open up a question to you, as we've talked about, do you think that the recent volume we've seen from these Patch Tuesdays is just organizations finding the low-hanging fruit vulnerabilities within their code, and as they're being fixed, and we'll, we'll turn back to a normal volume soon? Or do you think that this volume is gonna maintain itself and it's gonna become the new normal?

Ah, you're asking the, the tough questions to start the episode off, John.

No.

But we did have Patch Tuesday, and I remember last week.

Oh, my God.

Did we have a Patch Tuesday? Yeah.

Yeah, and honestly, from a new features perspective and from a security vulnerabilities fixed perspective, kind of one of the bigger ones, actually, in the latter case, by far the biggest one.

But this is the set of features that is sort of thought of as 26H2, even though these are coming today to 25 and 24H2 because that's how this works, right? Um, so I don't know, you know, if you have 26 H one, you got nothing.

Um, maybe they're just doing it for me to shut me the hell up, but, um, but either way, I don't care.

It's fine.