Truth in IT
    • Sign In
    • Register
        • Videos
        • Channels
        • Pages
        • Galleries
        • News
        • Events
        • All
Truth in IT Truth in IT
  • Data Management ▼
    • Converged Infrastructure
    • DevOps
    • Networking
    • Storage
    • Virtualization
  • Cybersecurity ▼
    • Application Security
    • Backup & Recovery
    • Data Security
    • Identity & Access Management (IAM)
    • Zero Trust
    • Compliance & GRC
    • Endpoint Security
  • Cloud ▼
    • Hybrid Cloud
    • Private Cloud
    • Public Cloud
  • Webinar Library
  • TiPs
  • DRAW
  • CPE

September 2025 Patch Tuesday: SMB Relay & Azure Entra

Fortra
03/30/2026
0 (0%)
Share
  • Comments
  • Download
  • Transcript
Report Like Favorite
  • Share/Embed
  • Email
Link
Embed

Transcript


and we're here to talk about the September patch Tuesday. The first thing I want to talk about today is CVE-2025-55234. It's an SMB relay attack. And the executive summary for this one definitely caught my attention. Microsoft states that they released the CVE to provide customers with audit capabilities. Now the goal of a CVE should be to define a vulnerability, not to announce new configuration features. I'm really hoping that Microsoft clarifies the statement, otherwise I wonder if this CVE should even exist. After all, SMB relay attacks are nothing new. A bit of a warning for anyone running the Microsoft High Performance Compute Pack or the HPC Pack. There was a single critical CVSS score vulnerability this month, and it was for CVE-2025-55232, which is a vulnerability in the HPC Pack. The vulnerability allows for unauthenticated remote code execution. Hopefully that risk will be offset by the fact that not everyone runs this software, and that's likely one of the reasons why Microsoft has indicated that exploitation is less likely for this vulnerability. Finally, just for awareness this month, I think it's worth mentioning CVE-2025-55241. It was an elevation of privilege in Azure Entra. Now this is a no privileges required privilege escalation, which is somewhat interesting, but there's no action to take on your part. The only reason I'm mentioning it is because Azure Entra is such a critical component in environments, and it's something that you might want to talk to Microsoft about just to find out a bit more about how this vulnerability was discovered, or to find out if it had ever been exploited in the past in your environment. I doubt that's the case, given they didn't say anything, but it's always worth double checking. Once again, I'm Tyler Reguli, and this has been your September Patch Tuesday Update. Thank you, and have a great day.

TL;DR

  • CVE-2025-55234 is an SMB relay attack that Microsoft released to provide audit capabilities, raising questions about whether it should be classified as a CVE since SMB relay attacks are not new.
  • CVE-2025-55232 is a critical unauthenticated remote code execution vulnerability in Microsoft HPC Pack, though exploitation is considered less likely due to limited deployment of the software.
  • CVE-2025-55241 is a no-privileges-required privilege escalation in Azure Entra that has been automatically patched, but organizations should verify if their environments were affected given Entra's critical role.

Summary

Tyler Reguly, Associate Director of Security R&D at Fortra, provides a focused analysis of September 2025's Microsoft Patch Tuesday release, highlighting three vulnerabilities that warrant attention from IT and security teams. The briefing examines CVE-2025-55234, an SMB relay attack that Microsoft released primarily for audit capabilities rather than as a traditional vulnerability disclosure—a decision that raises questions about CVE assignment practices. Reguly also covers CVE-2025-55232, a critical unauthenticated remote code execution vulnerability in Microsoft's High Performance Compute Pack, and CVE-2025-55241, a privilege escalation issue in Azure Entra that requires no user privileges. While the Azure Entra vulnerability has been patched automatically by Microsoft, Reguly recommends organizations verify whether their environments were affected. This concise update helps administrators prioritize patching efforts and understand the strategic implications of Microsoft's security communications.

Chapters

0:00 - Introduction
0:09 - CVE-2025-55234: SMB Relay
0:40 - CVE-2025-55232: HPC Pack RCE
1:15 - CVE-2025-55241: Azure Entra Escalation

Key Quotes

0:18 "Microsoft states that they released the CVE to provide customers with audit capabilities. Now the goal of a CVE should be to define a vulnerability, not to announce new configuration features."
0:54 "The vulnerability allows for unauthenticated remote code execution. Hopefully that risk will be offset by the fact that not everyone runs this software, and that's likely one of the reasons why Microsoft has indicated that exploitation is less likely for this vulnerability."
1:35 "Azure Entra is such a critical component in environments, and it's something that you might want to talk to Microsoft about just to find out a bit more about how this vulnerability was discovered, or to find out if it had ever been exploited in the past in your environment."

Categories:
  • » Cybersecurity » Cloud Security
  • » Data Protection
Channels:
News:
Events:
Tags:
  • Vulnerability Management
  • Cloud Security
  • Identity & Access
  • Technical Deep Dive
  • Best Practices
  • Patch Tuesday
  • Microsoft Security Updates
  • SMB Relay Attacks
  • Remote Code Execution
  • Azure Entra Security
  • Privilege Escalation
  • CVE Assignment Practices
Show more Show less

Browse videos

  • Related
  • Featured
  • By date
  • Most viewed
  • Top rated
  •  

              Video's comments: September 2025 Patch Tuesday: SMB Relay & Azure Entra

              How secure is your Microsoft enterprise? Under 5 minutes, earn $10 in TruthPoints.

              View CPE Certificates

              Upcoming 360 View Events

              • Nov
                19

                Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection

                11/19/202601:00 PM ET
                More events

                Industry Events (Sponsor Hosted)

                • Nov
                  18

                  Hands-On Workshop: Connecting On-Prem Data to Databricks with MinIO AIStor (International)

                  11/18/202608:00 AM ET
                  • Nov
                    19

                    Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents

                    11/19/202601:00 PM ET
                    • Nov
                      19

                      AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website

                      11/19/202601:00 PM ET
                      • Dec
                        02

                        Skylight en acción: salvaguardando la IA más allá del usuario.

                        12/02/202604:00 AM ET
                        • Dec
                          03

                          CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era

                          12/03/202601:00 PM ET
                          More events

                          Upcoming Webinar Calendar

                          • 11/18/2026
                            08:00 AM
                            11/18/2026
                            Hands-On Workshop: Connecting On-Prem Data to Databricks with MinIO AIStor (International)
                            https://www.truthinit.com/index.php/channel/2194/hands-on-workshop-connecting-on-prem-data-to-databricks-with-minio-aistor-international/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            Securing the Microsoft Enterprise: Strengthening Configuration Management, Identity Security, and Data Protection
                            https://www.truthinit.com/index.php/channel/2076/securing-the-microsoft-enterprise-strengthening-configuration-management-identity-security-and-data-protection/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            Zendesk Deep Dive: Get the work done faster with Employee Service AI Agents
                            https://www.truthinit.com/index.php/channel/2181/zendesk-deep-dive-get-the-work-done-faster-with-employee-service-ai-agents/
                          • 11/19/2026
                            01:00 PM
                            11/19/2026
                            AI Agent Showdown: Discover What Muse, Dots, and Duet Bring to Your Website
                            https://www.truthinit.com/index.php/channel/2228/ai-agent-showdown-discover-what-muse-dots-and-duet-bring-to-your-website/
                          • 12/02/2026
                            04:00 AM
                            12/02/2026
                            Skylight en acción: salvaguardando la IA más allá del usuario.
                            https://www.truthinit.com/index.php/channel/2147/skylight-en-acción-salvaguardando-la-ia-más-allá-del-usuario/
                          • 12/03/2026
                            01:00 PM
                            12/03/2026
                            CISO Insights: Steering Cybersecurity Strategies in an AI-Driven Era
                            https://www.truthinit.com/index.php/channel/2231/ciso-insights-steering-cybersecurity-strategies-in-an-ai-driven-era/
                          • 01/19/2027
                            04:00 AM
                            01/19/2027
                            Skylight in Aktion: Gewährleisten Sie KI-Schutz über den Benutzer hinaus
                            https://www.truthinit.com/index.php/channel/2176/skylight-in-aktion-gewährleisten-sie-ki-schutz-über-den-benutzer-hinaus/
                          • 01/19/2027
                            02:00 PM
                            01/19/2027
                            HUMAN Dialogue: Embracing the Rise of the Empowered AI Consumer.
                            https://www.truthinit.com/index.php/channel/2160/human-dialogue-embracing-the-rise-of-the-empowered-ai-consumer/
                          • 03/18/2027
                            01:00 PM
                            03/18/2027
                            Securing Access for People, Partners and AI Agents
                            https://www.truthinit.com/index.php/channel/2251/securing-access-for-people-partners-and-ai-agents/
                          • 06/17/2027
                            01:00 PM
                            06/17/2027
                            Stop the Leak: Data Loss Prevention for the AI Era
                            https://www.truthinit.com/index.php/channel/955/360view-stop-the-leak-data-loss-prevention-for-the-ai-era/
                          • 08/19/2027
                            01:00 PM
                            08/19/2027
                            Who Has Access to What...and Should They?
                            https://www.truthinit.com/index.php/channel/2252/who-has-access-to-what-and-should-they/
                          • 10/21/2027
                            01:00 PM
                            10/21/2027
                            After VMware: Building the Private Cloud You Actually Want
                            https://www.truthinit.com/index.php/channel/2253/after-vmware-building-the-private-cloud-you-actually-want/
                          • 11/18/2027
                            01:00 PM
                            11/18/2027
                            Assume Breach, Prove Recovery
                            https://www.truthinit.com/index.php/channel/2254/assume-breach-prove-recovery/
                          • 12/16/2027
                            01:00 PM
                            12/16/2027
                            The Self-Running Service Desk
                            https://www.truthinit.com/index.php/channel/2255/the-self-running-service-desk/
                          Truth in IT
                          • Sponsor
                          • About Us
                          • Terms of Service
                          • Privacy Policy
                          • Contact Us
                          • Preference Management
                          Desktop version
                          Standard version