Microsoft’s September 2025 Patch Tuesday shipped a wide-ranging set of fixes addressing 80 CVEs across Windows, Office, virtualization, and platform components — with eight rated Critical and 72 rated Important — and included several high-profile fixes for SMB, NTLM, NTFS, Office, SharePoint...
Microsoft’s September Patch Tuesday arrived with a broad set of fixes and a matching set of detection updates from Cisco Talos — including a new Snort ruleset — aimed at the most likely-to-be-exploited flaws this month. The update package contains dozens of CVEs spanning Windows core components...
Microsoft’s advisory that an improper authentication vulnerability in Windows NTLM can let an authenticated actor elevate privileges over the network is the latest warning flag in a year already crowded with NTLM-related incidents and active exploitation chains. The vendor entry the user...