Microsoft’s January 2026 Patch Tuesday fixes 112 CVEs, including an exploited Windows DWM zero-day, plus critical flaws ...

Today is Microsoft' 2026 Patch Tuesday with security updates for 114 flaws, including one actively exploited and two publicly ...

Forbes contributors publish independent expert analyses and insights. Davey Winder is a veteran cybersecurity writer, hacker and analyst. The secret to the continuing availability of security patches ...

Update, April 30, 2025: This story, originally published April 28, has been updated with further information regarding the hotpatching security update service for Windows Server 2025 users, as well as ...

CISA adds critical WSUS bug CVE-2025-59287 to its KEV catalog Microsoft issued emergency patch after real-world exploitation reports surfaced Over 2,800 WSUS servers exposed; agencies must patch by ...

Microsoft acknowledged a new issue caused by the June 2025 security updates, causing the DHCP service to freeze on some Windows Server systems. On Windows Server systems, the Dynamic Host ...

The web-based UI for managing all aspects of Windows Server, Windows Server Admin Center (WAC) sure has grown up a lot in the last seven years. If you're new to the concept, you can run WAC on a ...

The US Cybersecurity and Infrastructure Security Agency (CISA) has added a new bug to its Known Exploited Vulnerabilities ...

Many security breaches can be avoided by applying software patches to known vulnerabilities as soon as they’re released by the vendor. Patch management software provides a centralized place for IT ...

The memory leak security vulnerability allows unauthenticated attackers to extract passwords and tokens from MongoDB servers.