Record Patch Tuesday: HTTP.sys Zero-Day, BitLocker Bypass & ServiceNow Breach

Three Zero-Days, One Patch Tuesday

Microsoft just pushed the largest Patch Tuesday in its twenty-three year history, and three of those patches are not optional. They're actively exploited zero-days, confirmed in the wild, affecting Windows workstations, servers, and encrypted drives across every enterprise environment.

Listen now →

Three Zero-Days — CTFMON, HTTP.sys, BitLocker

Start with HTTP.sys. An unauthenticated attacker can send a malicious HTTP packet to a Windows server running IIS or any HTTP.sys-dependent service and achieve kernel-mode code execution.

Listen now →

AI Exploit Generation Shrinks Patch Window

Here's the context that makes all of this harder. Large language models can now reverse-engineer patches and generate functional exploits within hours of a public release.

Listen now →

ServiceNow Breach — Silent Disclosure Problem

While Microsoft's release was very public, a separate incident has quieter but significant consequences. ServiceNow, the IT service management platform used by more than eight thousand enterprises, confirmed a breach of its customer data.

Listen now →

Credential Exposure and What to Check Now

The deeper concern with ServiceNow is what was in those tickets. IT service management platforms are integration hubs.

Listen now →

What Enterprises Must Do Now

The near-term priorities are fairly clear. Patch HTTP.sys immediately on all internet-facing Windows servers.

Listen now →