Microsoft September 2025 Patch Tuesday fixes 81 vulnerabilities including two zero-days in Windows SMB and SQL Server ...

Security assessment vendor Immunity Inc. has discovered a way to exploit a recently disclosed bug in Microsoft Corp.’s Windows operating system, and researchers are concerned that a new worm attack, ...

New computer code that exploits a recently disclosed hole in Microsoft Corp.’s Internet Explorer Web browser is circulating on the Internet and could allow remote attackers to take full control of ...

Hackers are actively exploiting a new zero-day bug in Microsoft's SharePoint Server software. The same software is used by key U.S. government agencies, including those tied to national security. The ...

An elevation of privilege vulnerability in the Windows NTLM authentication protocol and a flaw in Office’s Preview Pain are ...

Researchers have unearthed two publicly available exploits that completely evade protections offered by Secure Boot, the industry-wide mechanism for ensuring devices load only secure operating system ...

Breen said another patch — CVE-2025-55234, a 8.8 CVSS-scored flaw affecting the Windows SMB client for sharing files across a network — also is listed as privilege escalation bug but is likewise ...

Microsoft has confirmed that the 2025 Windows security updates are causing connection issues to Server Message Block (SMB) v1 ...

Microsoft Systems administrators everywhere, it looks like you get a Patch Monday as a side dish to the usual Patch Tuesday this week. There's a full remote code vulnerability (RCE) exploit for ...