Windows Server 2025 is currently open to a Remote Code Execution exploit via the Windows Update Service, and at the time of this writing a fix from Microsoft has yet to fully patch the issue. Reports ...

Microsoft issues emergency patch for a critical WSUS flaw enabling remote code execution CVE-2025-59287 allows unauthenticated attackers to gain SYSTEM privileges without user interaction An ...

Windows Server is under attack, act now. Updated October 26 with more technical information regarding the latest Microsoft Windows emergency security update addressing CVE-2025-59287, a critical ...

Microsoft earlier provided patches to address nine browser vulnerabilities, which are not included in the Patch Tuesday count above. In addition, Microsoft issued a crucial out-of-band (emergency) ...

Microsoft’s October Patch Tuesday releases will fix 167 vulnerabilities, the highest number this year, including seven rated as critical that need immediate attention from CISOs. Separately, SAP ...

Update March 22: Microsoft has released emergency out-of-band (OOB) updates to fix this known issue. The March 2024 Windows Server updates are causing some domain controllers to crash and restart, ...

Update, April 30, 2025: This story, originally published April 28, has been updated with further information regarding the hotpatching security update service for Windows Server 2025 users, as well as ...