Patch Management

February 2026 Patch Tuesday

Microsoft’s February Patch Tuesday addressed a significant number of vulnerabilities, including six zero-day exploits affecting Windows and Office, with several already being activ…

January 2026 Patch Tuesday

This month’s security updates require immediate attention to both Windows and web browsers. Microsoft has a known exploited vulnerability (CVE-2026-20805) and two publicly disclose…

DLL Hijacking: Risks, Real-World Examples and How to Prevent Attacks

There’s been buzz around CVE-2025-56383 (published on Sept. 26, 2025), a hijacking vulnerability in Notepad++ v8.8.3 in which a DLL file can be swapped to execute malicious code. T…

December 2025 Patch Tuesday

Here we are at the final Patch Tuesday for 2025. Microsoft has resolved 56 CVEs (two Critical and 54 Important). Included in this release is one known exploited (CVE-2025-62221) an…

November 2025 Patch Tuesday

November Patch Tuesday is the first Patch Tuesday after the EoL of Windows 10. In the shadow of Windows 10, there are a number of other product EoLs of note. Exchange Server, for o…

Unpatchable Vulnerabilities: Key Risk Mitigation Strategies

Wouldn’t it be great if every vulnerability had a fix waiting in the wings? If patching were always fast, easy, and complete? That’s not the world we live in. Some vulnerabilities …

October 2025 Patch Tuesday

October Patch Tuesday is going to be a busy one from all angles. Microsoft exceeded the January CVE count (159 CVEs) by a healthy margin, with 172 CVEs resolved this month. There a…