Jan 14, 2025 · Today is Microsoft's January 2025 Patch Tuesday, which includes security updates for 159 flaws, including eight zero-day vulnerabilities, with three actively exploited in attacks.

Apr 24, 2024 · Learn how to find and mitigate zero-day vulnerabilities in your environment through Microsoft Defender Vulnerability Management.

Jan 15, 2025 · Microsoft recently released its January 2025 Patch Tuesday cumulative update, which included security updates for 159 flaws across Windows OS, Microsoft Office, .NET, Azure, Kerberos, and Windows Hyper-V. These included eight zero-day vulnerabilities, of which three are under active exploitation and ...

Jan 15, 2025 · Microsoft has confirmed that a staggering three zero-day cyberattacks are underway against Windows users—here’s what you need to know.

Dec 10, 2024 · Microsoft has fixed an actively exploited zero-day that allows attackers to gain SYSTEM privileges on Windows devices. No information has been released as to how the flaw was exploited in...

Aug 13, 2024 · Today is Microsoft's August 2024 Patch Tuesday, which includes security updates for 89 flaws, including six actively exploited and three publicly disclosed zero-days. Microsoft is still...

Jan 14, 2025 · News. Microsoft's Massive First Patch of 2025 Includes 8 Zero-Day Flaw Fixes. By Chris Paoli; 01/14/2025; Microsoft’s first Patch Tuesday of 2025 has arrived, and it's a big one.

Sep 10, 2024 · Microsoft on Tuesday raised an alarm for in-the-wild exploitation of a critical flaw in Windows Update, warning that attackers are rolling back security fixes on certain versions of its flagship operating system.

Jan 15, 2025 · The five publicly disclosed zero-days, which are currently not being exploited, are: CVE-2025-21275: A Windows App Package Installer EoP vulnerability; CVE-2025-21308: A Windows Themes spoofing vulnerability; CVE-2025-21186, CVE-2025-21366 and CVE-2025-21395: Remote code execution (RCE) vulnerabilities in Microsoft Access

Oct 9, 2024 · Rated as “important” and with a CVSS score of 7.8, this is a remote code exploit (RCE) vulnerability in Microsoft Management Console (MMC). Exploiting this flaw would involve tricking a user into...