November 08, 2022

Microsoft patches 62 vulnerabilities, including Kerberos, and Mark of the Web, and Exchange…sort of

Still no fix for ProxyNotShell, but two MOTW bypasses get squashed

Threat Research

October 11, 2022

You can’t always get what you want on Patch Tuesday

No joy for Exchange admins looking to seal off two widely reported Server vulns

Threat Research

September 13, 2022

A lighter Patch Tuesday, but one heavy with remote code execution bugs

There are fewer bugs in September’s update than in previous months, with RCE vulns making up the bulk of the addressed CVEs

Threat Research

August 10, 2022

Microsoft squares away 121-CVE Patch Tuesday for August

Another tough month for Azure admins; meanwhile, Windows takes a long road to a Dogwalk

Threat Research

July 12, 2022

July Patch Tuesday is Rich in Azure, Windows Issues

Windows-facing issues make up the bulk of the 85 CVEs addressed, with one vulnerability under active exploit in the wild

Threat Research

June 14, 2022

Lighter Patch Tuesday for June remains rich in LDAP vulns

The second-lightest set of updates so far in 2022 goes heavy on RCEs, brings along four Intel patches for company

Threat Research

May 10, 2022

Hyper-V and Active Directory Front and Center for May Patch Tuesday

Organizations should look at last month’s and this month’s bulletins and put their Hyper-V and Active Directory servers and infrastructure at the top of the priority list.

Threat Research

April 12, 2022

RPC Vulnerability Stands Out in a Field of 128 in April

This month’s Patch Tuesday is more about quantity than severity, with one flashback-inducing exception

Threat Research

March 08, 2022

Microsoft patches 71 vulnerabilities including RDP Client, Exchange Server, Intune

Just two Critical-class vulnerabilities, but Windows Update doesn’t handle every package this month

Threat Research