14 May, 2025

Play ransomware exploited Windows logging flaw in zero-day attacks

The Play ransomware gang has exploited a high-severity Windows Common Log File System flaw in zero-day attacks to gain SYSTEM privileges and deploy malware on compromised systems. The vulnerability, tracked as CVE-2025-29824, was tagged by Microsoft as exploited in a limited number of attacks and patched during last month’s Patch Tuesday. “The targets include organizations in the information […]

2 mins read

Microsoft: April updates cause Windows Server auth issues

Microsoft says the April 2025 security updates are causing authentication issues on some Windows Server 2025 domain controllers. The list of impacted platforms includes Windows Server 2016, Windows Server 2019, Windows Server 2022, and the latest version, Windows Server 2025. However, as the company further explained, home users are unlikely to be affected by this […]

3 mins read

Microsoft unveils new AI agents that can modify Windows settings

Today, Microsoft announced new Windows experiences for Copilot+ PCs, including AI agents that will make changing settings on your Windows computer easier. The company says users will be able to use these new agents to find settings they want to change using natural language quickly, and even instruct them to do it without any user […]

3 mins read

Microsoft pushes fix for Windows 11 24H2 update failures

​Microsoft has fixed a known issue preventing Windows 11 24H2 feature updates from being delivered via Windows Server Update Services (WSUS) after installing the April 2025 security updates. WSUS was introduced as Software Update Services (SUS) almost twenty years ago, and it is designed to help IT admins defer, approve, and schedule updates for Microsoft […]

2 mins read

Microsoft silently fixes Start menu bug affecting Windows 10 PCs

Microsoft has silently fixed an issue that broke Start Menu jump lists for all apps on systems running Windows 10, version 22H2. The Windows 10 jump list feature lets users quickly access recently opened files and tasks using the context menu when right-clicking an app’s icon in the Start menu or the Windows taskbar. As […]

2 mins read

Microsoft: Windows 11 24H2 now ready to rollout to everyone

​Microsoft announced over the weekend that the Windows 11 24H2 update is ready to roll out to all compatible PCs, excluding those with safeguard holds. Also known as the Windows 11 2024 Update, this release will now be offered to all Windows devices that aren’t configured to defer feature updates. “We have reached the last […]

2 mins read

Microsoft makes all new accounts passwordless by default

Microsoft has announced that all new Microsoft accounts will be “passwordless by default” to secure them against password attacks such as phishing, brute force, and credential stuffing. The announcement comes after the company started rolling out updated sign-in and sign-up user experience (UX) flows for web and mobile apps in March, optimized for passwordless and passkey-first authentication. […]

2 mins read

Hackers abuse IPv6 networking feature to hijack software updates

A China-aligned APT threat actor named “TheWizards” abuses an IPv6 networking feature to launch adversary-in-the-middle (AitM) attacks that hijack software updates to install Windows malware. According to ESET, the group has been active since at least 2022, targeting entities in the Philippines, Cambodia, the United Arab Emirates, China, and Hong Kong. Victims include individuals, gambling companies, […]

2 mins read

Microsoft: Windows 11 24H2 updates fail with 0x80240069 errors

Microsoft has confirmed that Windows 11 24H2 feature updates via Windows Server Update Services (WSUS) are being blocked after installing the April 2025 security updates. Introduced as Software Update Services (SUS) almost two decades ago, WSUS helps IT admins manage (i.e., defer, approve, and schedule) updates for Microsoft products across large enterprise networks from a […]

2 mins read

Microsoft: Windows Server hotpatching to require subscription

Microsoft has announced that it will soon introduce paid subscriptions for Windows Server 2025 hotpatching, a service that enables admins to install security updates without restarting. The company urged admins to try hotpatching free of charge before it becomes generally available in July, when they’ll have to pay for a subscription to test it. However, […]

2 mins read