À PROPOS DE CET ÉPISODE
![Patch [FIX] Tuesday: October 2026 – [An Exploited MOTW Bypass and a Reading Pane RCE], E37](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-october-fqiaZATLY1W-_uJfLxT4y3m.1400x1400.jpg "Patch [FIX] Tuesday: October 2026 – [An Exploited MOTW Bypass and a Reading Pane RCE], E37")
Another heavy Patch Tuesday, and Serena DiPenti and Seth Hoyt start with the bug Microsoft confirms attackers are already using: a Windows Shell flaw that gets files past Mark of the Web. A user still has to open the file, but it opens with no SmartScreen warning, no Protected View, and no macro block, and Microsoft rates it only Important.
They also cover:
- Why one of the credited finders on that Shell bug used Anthropic's Claude, and what AI-assisted research is doing to the report volume at every vulnerability disclosure program
- An Outlook remote code execution bug that fires when a crafted email shows in the Reading Pane, with no open and no click, and why Office updates need checking separately from Windows updates
Don't let the severity label set your order. Patch the exploited bug first, and confirm Office actually updated.
Anglais
États-Unis
TRANSCRIPTION 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
RECHERCHER LES ÉPISODES PASSÉS
Rechercher les épisodes précédents de Autonomous IT.
AUTRES ÉPISODES DANS CE PODCAST
![Patch [FIX] Tuesday – [Nothing Weaponized, Everything Exposed], E33](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-nothing-9F8CslWqMh5-5sQrWj8AYTd.1400x1400.jpg)
June 2026 has no headliner. Instead of one critical bug, the release spreads thin across the kernel, the network stack, a code editor, an AI assistant, a bootloader, and a nine-year-old Linux root bug. It's a breadth problem, not a severity one, and it changes how you triage.
Jason Kikta and Landon…
Claude Mythos dominated the AI security conversation for two weeks straight, from the Cloud Security Alliance's strategy briefing to sharp public skepticism to yesterday's Bloomberg report that unauthorized users on Discord have been accessing Mythos since its limited launch. Host Jason Kikta cuts …
![Patch [FIX] Tuesday – [Emergency Episode: DirtyFrag Exploit Before Patch], Ep. 31](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-emergency-VpTmW8Ds3Bk-j7mrAzMa1XO.1400x1400.jpg)
Breaking from the normal Patch Tuesday cadence for an emergency drop. On May 7, security researcher Hyunwoo Kim published a working proof-of-concept for DirtyFrag - a Linux kernel local privilege escalation chain that gets unprivileged users to root on every major distribution. The embargo was brok…
![Patch [FIX] Tuesday – [AI Hits the Hat Trick], Ep. 32](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-ai-hits-L-V6Kt5mxXd-UKy4XROG1Lm.1400x1400.jpg)
The May 2026 Microsoft Patch Tuesday release looks quiet on the surface – no actively exploited zero-days, no public disclosures at release, and a CVE count below the four-month average. Don't let that fool you.
In this episode, Jason Kikta and Landon Miles break down everything that happened betwe…
In this episode of Autonomous IT, Live!, we break down the widening gap between exploitation speed and remediation reality. Disclosed vulnerabilities keep climbing, exploitation windows keep shrinking, and IT and security teams are expected to absorb more risk without more resources. The traditiona…
Avertissement: Le podcast et les illustrations intégrés sur cette page proviennent de Automox, qui est la propriété de son propriétaire et n'est ni affilié ni approuvé par Listen Notes, Inc.
MODIFIER
Merci de nous avoir aidé à tenir la base de données de podcasts à jour.
