Jordan Benzing goes over the latest update releases and which ones are keeping him awake at night. Then Bryan Dam spends far too long discussing the news of the month for April. Wrapping up and giving us a wildly entertaining Patch Tuesday Support Group webinar for April is Rob Mensching (@meschine ) CEO & Co-founder at FireGiant and Benevolent Dictator of the open-source WiX Toolset. https://patchmypc.com/patch-tuesday-s...
—
(0:00) – Introduction
(4:10) – CVE and Security updates
(11:42) – KB5037570 Microsoft Patch Virus / kyx3f6t
(12:55) – Memory Leak for LSSAS impacting Domain Controller https://learn.microsoft.com/en-us/win...
(14:05) – KB5025885 Mitigating Black Lotus https://support.microsoft.com/en-us/t...
(17:38) – Updating list other Microsoft products https://learn.microsoft.com/en-us/win...
(18:50) – Thousands of LG TVs takeover https://arstechnica.com/security/2024...
(19:40) – US Cyber Safety review board https://www.dhs.gov/news/2024/04/02/c...
(23:00) – Microsoft employees exposed internal password https://techcrunch.com/2024/04/09/mic...
(23:40) – No more free Microsoft 365 developer subscriptions https://devblogs.microsoft.com/micros...
(24:20) – What's new in Intune https://learn.microsoft.com/en-us/mem...
(27:00) – Redis Adopts Dual Source Licensing https://redis.io/blog/redis-adopts-du...
(29:25) – Hashicorp threatens OpenTofu for copying source / 1776398008558493991
(30:22) – What we know about xz Utils backdoor https://arstechnica.com/security/2024...
(33:20) – Rob Mensching Intro https://robmensching.com/
(39:50) – Open Source Entitled Consumers
(45:00) – Open Source Maintainers are an Attack Vector
(49:48) – Regulatory requirements are a 'you problem'
(55:55) – Rob's final thoughts
(57:05) – Outro