Two significant vulnerabilities – both extending far beyond Microsoft – make this a crucial month for admins to stay on their game