PLAY PODCASTS
Patch [FIX] Tuesday – August 2025: [Crafted Files, Spoofed Certs, and Good Ol' SQL Injection], E22
Episode 22

Patch [FIX] Tuesday – August 2025: [Crafted Files, Spoofed Certs, and Good Ol' SQL Injection], E22

Autonomous IT

August 12, 20258m 6s

Audio is streamed directly from the publisher (media.transistor.fm) as published in their RSS feed. Play Podcasts does not host this file. Rights-holders can request removal through the copyright & takedown page.

Show Notes

Join Automox cybersecurity experts Ryan Braunstein and Mat Lee for August 2025’s Patch [FIX] Tuesday, covering a Hyper-V privilege escalation, an Azure Virtual Machines spoofing flaw, and four serious SQL Server vulnerabilities. Learn how attackers could chain virtualization and cloud exploits, why crafted VHDX files and spoofed certificates are dangerous, and the ongoing threat of SQL injection. Includes recommendations for hardening databases, improving certificate management, and reducing lateral movement risks in virtualized environments.

Topics

Hyper-VAzure Virtual Machinesspoofing vulnerabilityelevation of privilegeVHDX filesbuffer overflowcertificate-based authenticationlateral movementvirtualization securitySQL ServerSQL injectionT-SQL commandsdatabase securityparameter sanitizationpatch managementvulnerability chainingcloud securitydatabase hardeningMicrosoft Patch TuesdayAugust 2025 updates