Patch [FIX] Tuesday – April 2025: [Remote Desktop Roulette, CLFS Exploits, and macOS Vulns], E18

Autonomous IT

In April 2025's edition of Patch [FIX] Tuesday, the crew dives into April 2025’s patch highlights. Ryan kicks things off with a critical RDP Gateway vulnerability that requires no user interaction—just network access and bad intentions. Seth breaks down a kernel-level CLFS exploit that’s already been seen in the wild, while Henry shifts gears to Apple’s massive 130+ CVE patch dump for macOS Sequoia. From use-after-free bugs to sneaky audio file attacks, this episode covers the month’s biggest risks.

TL;DR: Patch your systems, secure your gateways, and maybe don’t trust that sketchy MP3.