Hello and welcome to the Wednesday, June 11, 2025 edition of the Sands Internet Storm Centers.

Stormcast, my name is Johannes Ulrich, and this episode brought you by the Sands.edu Bachelor's

Decree Program in Applied Cybersecurity is recorded in Jacksonville, Florida.

Well, of course, today we have to start with Microsoft Patch Tuesday.

Microsoft released a little bit lighter, I would say,

an average patch Tuesday with 67 vulnerabilities being patched,

10 vulnerabilities being rated critical,

and then one being already exploited,

and one being disclosed before today. It was actually one of the 67 vulnerabilities

that had already been patched, announced by Microsoft Microsoft before today.

But anyway, so let's take a look at some noteworthy warn abilities here.

The first one, of course, the one that's already being exploited.

This is a web DAV vulnerability. If you're not familiar with WebDAF, it's an extension to HTTP.

It is essentially allowing you to use a web

server, kind of like a remote file system, SharePoint, systems like this, like this. I have also

seen this sometimes being used, for example, to manage files on a web server. Not as the greatest idea, but certainly has been used like this.

When I first saw WebDaf, I was a little bit afraid that this is something like an IIS or not a server component here.

However, this is in the Clined component.

In order to exploit this, you have to trick the client to actually

connect to a particular webdath resource. Well, this is not necessarily that crazy difficult.

The really interesting part here, and a little bit of a difficult part here is that this vulnerability

is in one of these leftover

...