Cybersecurity Today Microsoft Patches Zero Day And More
Sep 12, 2025
Microsoft's recent patch update tackles 81 security flaws, including two severe vulnerabilities. A notable data breach in Canada has left sensitive information exposed. NVIDIA introduces an open-source AI tool to help detect vulnerabilities. Meanwhile, a US senator is pushing for an FTC investigation into Microsoft's security practices. The podcast also addresses the puzzling issue of bricked SSDs after a Windows 11 update. Tune in for the latest happenings in the cybersecurity landscape!
AI Snips
Chapters
Transcript
Episode notes
September Patch Tuesday Scope
- Microsoft's September Patch Tuesday fixed 81 flaws including two publicly disclosed zero-days.
- With nine critical issues and many elevation-of-privilege and RCE bugs, prioritize this update for high-risk systems.
Harden SMB Before Applying Patches
- Enable SMB signing and extended protection for authentication to mitigate CVE-55234 relay-style attacks.
- Check compatibility first so you do not break older systems or services.
JSON Library Flaw In SQL Server
- CVE-2024-21907 targets the Newtonsoft JSON library in SQL Server and can trigger stack overflows from crafted JSON.
- The flaw allows denial-of-service without authentication, increasing its practical impact.