Hello and welcome to the Wednesday, June 10th, 2006 edition of the Sands Internet Storms Center's Stormcast. My name is Johannes Ulrich,

recording today from Jacksonville, Florida. And this episode is brought you by the sands.edu graduate certificate program in incident response.

Well, it's patched Tuesday, so let's start with what Microsoft had to offer today,

and we've got patches for 204 vulnerabilities, which actually just covers the Microsoft part here.

There are also 360 vulnerabilities being addressed this month in

Chromium, which then does affect the edge browser created by Microsoft. So we certainly start

seeing some of the AI creation effect here coming in with the larger number of vulnerabilities in total.

However, I think one thing to consider here is it's not necessarily that there are more vulnerable products.

So you still need to patch about the same number of products, which in particular in the chromium case,

well, keep edge up to date,

and that takes care of over half of the vulnerabilities this month as far as Microsoft is concerned.

But let's go back to the vulnerabilities here. There are six of the vulnerabilities that affect

Microsoft Cloud Solutions, so you don't have to do anything about it.

Among the other vulnerabilities, there are 38 critical ones and three that were disclosed before the day, but not yet exploited.

Now, one of these disclosed vulnerabilities is the bitlocker bypass.

There was quite a bit of talk about that.

Now, there are two additional bitlocker bypass vulnerabilities actually that have been patched here.

So it's not just the one that Nightmare Clips published a couple weeks ago.

Now, there are also two vulnerabilities affecting HTTP.Sys.

That's essentially Microsoft's web server engines.

One of the vulnerabilities already talked about,

that one has already been disclosed as well.

...