이 에피소드에 관해
![Patch [FIX] Tuesday: October 2026 – [An Exploited MOTW Bypass and a Reading Pane RCE], E37](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-october-fqiaZATLY1W-_uJfLxT4y3m.1400x1400.jpg "Patch [FIX] Tuesday: October 2026 – [An Exploited MOTW Bypass and a Reading Pane RCE], E37")
Another heavy Patch Tuesday, and Serena DiPenti and Seth Hoyt start with the bug Microsoft confirms attackers are already using: a Windows Shell flaw that gets files past Mark of the Web. A user still has to open the file, but it opens with no SmartScreen warning, no Protected View, and no macro block, and Microsoft rates it only Important.
They also cover:
- Why one of the credited finders on that Shell bug used Anthropic's Claude, and what AI-assisted research is doing to the report volume at every vulnerability disclosure program
- An Outlook remote code execution bug that fires when a crafted email shows in the Reading Pane, with no open and no click, and why Office updates need checking separately from Windows updates
Don't let the severity label set your order. Patch the exploited bug first, and confirm Office actually updated.
영어
미국
전사 🔗
Are you the producer of this podcast?
Add a podcast transcript
Need Audio-to-Text?
Transcribe with Listen411 in Just 60 Seconds
이 팟캐스트의 다른 에피소드
![Patch [FIX] Tuesday – [AI Hits the Hat Trick], Ep. 32](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-ai-hits-L-V6Kt5mxXd-UKy4XROG1Lm.1400x1400.jpg)
The May 2026 Microsoft Patch Tuesday release looks quiet on the surface – no actively exploited zero-days, no public disclosures at release, and a CVE count below the four-month average. Don't let that fool you.
In this episode, Jason Kikta and Landon Miles break down everything that happened betwe…
In this episode of Autonomous IT, Live!, we break down the widening gap between exploitation speed and remediation reality. Disclosed vulnerabilities keep climbing, exploitation windows keep shrinking, and IT and security teams are expected to absorb more risk without more resources. The traditiona…
![Patch [FIX] Tuesday – [Emergency Episode: DirtyFrag Exploit Before Patch], Ep. 31](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-emergency-VpTmW8Ds3Bk-j7mrAzMa1XO.1400x1400.jpg)
Breaking from the normal Patch Tuesday cadence for an emergency drop. On May 7, security researcher Hyunwoo Kim published a working proof-of-concept for DirtyFrag - a Linux kernel local privilege escalation chain that gets unprivileged users to root on every major distribution. The embargo was brok…
Claude Mythos dominated the AI security conversation for two weeks straight, from the Cloud Security Alliance's strategy briefing to sharp public skepticism to yesterday's Bloomberg report that unauthorized users on Discord have been accessing Mythos since its limited launch. Host Jason Kikta cuts …
![Patch [FIX] Tuesday – [Nothing Weaponized, Everything Exposed], E33](https://cdn-images-3.listennotes.com/podcasts/autonomous-it/patch-fix-tuesday-nothing-9F8CslWqMh5-5sQrWj8AYTd.1400x1400.jpg)
June 2026 has no headliner. Instead of one critical bug, the release spreads thin across the kernel, the network stack, a code editor, an AI assistant, a bootloader, and a nine-year-old Linux root bug. It's a breadth problem, not a severity one, and it changes how you triage.
Jason Kikta and Landon…
면책 조항: 이 페이지에 포함된 팟캐스트와 작품은 Automox에서 가져온 것입니다. 이 팟캐스트는 소유자의 재산이며 Listen Notes, Inc.와 제휴하거나 보증하지 않습니다.
