Joined June 2026
- Tweets 21
- Following 1
- Followers 32
- Likes 0
Photos and videos
Jun 11
Microsoft's June 2026 Patch Tuesday set a record: ~200 CVEs, the biggest list ever.
We diffed ~130 of the patched binaries. Even at 200 CVEs, the advisories don't describe everything that changed.
Here's what the diffs show that the CVE text doesn't 🧵
1
5
7
285
Jun 11
The slickest catch: one feature flag rerouted Kerberos PAC decoding to a new path across THREE binaries - LSASS, Credential Guard (LsaIso), the Kerberos client lib.
Kerberos & LSASS did get CVEs this month. The advisories just don't show this cross-binary shape.
1
2
3
145
Jun 11
The lesson: a record ~200 CVEs still isn't the whole picture. The binary diffs carry hardening the advisories never spell out.
We read them so you don't have to.
🦅 PatchHawk
#PatchTuesday #infosec
2
3
124
Jun 4
7-Zip 26.01's changelog lists exactly ONE security fix.
We diffed the source, 26.00 -> 26.01. It silently shipped 14 MORE.
"Some bugs were fixed" was doing a lot of heavy lifting. 🧵
1
5
10
2,660
Jun 4
Linux mainline quietly shipped a fix for a remote kernel heap overflow in the iSCSI target. It fires during login, before the CHAP password is ever checked.
No CVE. The commit just says "validate CHAP_R length before base64 decode."
Only watch CVE feeds? You missed it. 🧵
1
4
3
235
Jun 4
These are mainline -rc fixes: Cc: stable, no CVE yet by design. CVEs land later, on backport.
We read the merge graph so you see them now, not after the feed catches up.
🦅 PatchHawk
#LinuxKernel #infosec
1
2
2
106