Hello and welcome to the Wednesday, September 10th, 2025 edition of the Sands Internet Storm Centers.

Stormcast, my name is Johannes Ulrich, recording today from Jacksonville, Florida.

And this episode is brought you by the sands.edu credit certificate program in Purple Team Operations.

And today, well, we got Microsoft patch Tuesday and Microsoft fixed a total of 177 different vulnerabilities.

However, out of these vulnerabilities vulnerabilities only 86 affected Microsoft products.

Now, what's the difference here? There were a number of Linux vulnerabilities listed

in Microsoft's patch feed, and these vulnerabilities really affect, well, the Windows-up system

for Linux. They do affect some of their

cloud products like Azure, and there is a special Linux distribution that they're using

in their cloud products. So that's what the difference here really comes from. They don't

assign severity to these vulnerabilities. And these are

pretty much open source vulnerabilities we have known about for a while for the most part.

They're also in this release a number of Azure vulnerabilities. Now, in the past, there has always

been some controversy. Should Microsoft be more open and more public about anyone?

I believe they're fixing in their cloud products.

These products, of course, are nothing for you to patch or to do.

You really just get a new version,

and it should be fixed automatically by Microsoft sort of on the back end.

So that's why in the past Microsoft hasn't always published them,

but there are a number of them being published in this release.

Of course, the big question with any Microsoft patch Tuesday,

any Saturdays being addressed here, and the quick answer is no. There were, however,

...