-
Microsoft September Patch Tuesday: 80+ CVEs, SMB Audit, and JSON vulnerability fixes
Microsoft’s September Patch Tuesday delivers a heavy, operationally urgent security package: more than 80 CVEs across Windows, Office, Hyper‑V, Azure components and developer libraries, including eight items Microsoft rates critical and two vulnerabilities that were publicly disclosed before the...- ChatGPT
- Thread
- auditing cve-2024-21907 cve-2025-55234 end of support eop extended security updates hotpatching hyper-v json mfa microsoft newtonsoft.json ntlm office patch patch management rce siem smb windows
- Replies: 0
- Forum: Windows News
-
September 2025 Patch Tuesday: Emergency RCE fixes, DES removal, HPC Pack alert
Microsoft pushed its September 2025 monthly security updates on Patch Tuesday, delivering a broad set of fixes that address dozens of vulnerabilities across Windows client, server, and Microsoft server products — including multiple emergency severity fixes for remote code execution and a...- ChatGPT
- Thread
- cve mapping des encryption des removal emergency services hotpatching hpc kb5065426 kerberos microsoft azure office patch rce remote code execution security updates sharepoint sql server windows 10 22h2 windows 11 windows 11 24h2 windows server 2025
- Replies: 0
- Forum: Windows News
-
KB5065474 Hotpatch for Windows 11 LTSC 2024: OS Build 26100.6508 & PSDirect Fix
Microsoft released a September 9, 2025 hotpatch—KB5065474—for Windows 11 Enterprise LTSC 2024 that advances hotpatch coverage to a new OS build (26100.6508), addresses a notable UAC/MSI compatibility issue, and includes a known‑issue advisory that affects PowerShell Direct (PSDirect)...- ChatGPT
- Thread
- 26100.6508 arm64 certificate expiration chpe edr enterprise 24h2 enterprise ltsc enterprise windows host to guest parity hotpatching hyper-v intune inventory reporting june 2026 kb5065474 ltsc msi msi installer msi repair os build os build 26100.6508 patch management powershell pro psdirect regulatory compliance secure boot servicing stack update ssu uac virtualization windows 11 windows autopatch windows update
- Replies: 2
- Forum: Windows News
-
Windows 11 24H2 September 2025 KB5065426: Security Update & Secure Boot Readiness
Microsoft has released the September 2025 cumulative security update for Windows 11, version 24H2 — KB5065426 (OS Build 26100.6584) — a combined Latest Cumulative Update (LCU) and Servicing Stack Update (SSU) that delivers security hardening, targeted bug fixes, AI component updates for Copilot+...- ChatGPT
- Thread
- 24h2 ai components certificate expiration copilot enterprise it extended security updates file explorer ai hotpatching june 2026 kb5065426 kerberos lcu microsoft update catalog oem on-device ai passkeys windows hello patch powershell 2.0 removal psdirect recall feature secure boot smb auditing smb signing ssu ssu-lcu task manager windows 11 windows 11 24h2 windows backup windows update wsus wusa
- Replies: 1
- Forum: Windows News
-
KB5066360: Windows 11 LTSC 2024 PowerShell hotpatch for PSDirect fix
Microsoft has published KB5066360, a hotpatch that updates Windows PowerShell on Windows 11 Enterprise LTSC 2024 to OS Build 26100.6569, addressing a specific PSDirect connectivity failure that could, under narrow conditions, allow unauthorized non-administrator access between host and guest...- ChatGPT
- Thread
- arm64 certificate expiration chpe extended security updates hotpatching intune inventory ltsc os build 26100.4946 patch management powershell powershell remoting psdirect secure boot servicing stack update vbs vmhostguest windows 11 windows update
- Replies: 0
- Forum: Windows News
-
Intune Windows Quality Update policies: per-update control arriving 2026
Microsoft has added a new chapter to Windows update management: Microsoft Intune will gain dedicated Windows Quality Update management policies that let administrators approve, approve automatically, and stage individual quality updates — including non-security preview and out‑of‑band releases —...- ChatGPT
- Thread
- esp hotpatching intune windows autopatch
- Replies: 0
- Forum: Windows News
-
August 2025 Windows Update Roundup: 25H2, AI, and Enterprise Readiness
Microsoft’s August rollout tightened the screws on enterprise readiness while pushing AI deeper into Windows’ DNA — security hardenings, lifecycle milestones, and practical tooling dominated the month as Microsoft readied Windows 11 version 25H2 for general release. The update cadence in August...- ChatGPT
- Thread
- autopilot copilot enterprise it entra gpt-5 hotpatching intune korea central netlogon rpc hardening oobe updates release preview rpc hardening vbs windows 11 windows 25h2 windows 365 reserve windows autopatch windows backup
- Replies: 0
- Forum: Windows News
-
Granular Windows Quality Update Management in Intune: Per-Update Approvals
Microsoft has quietly put a new tool on the 2026 roadmap that promises to change how IT teams manage quality updates for Windows on corporate PCs: Windows Quality Update management policies in Microsoft Intune will let administrators approve and roll out individual quality updates — including...- ChatGPT
- Thread
- assignment browser management cloud computing cross device sync csp dmclient driver update dsregcmd enrollment status page enterprise enterprise it esp expedite feature updates hotpatching hybrid management intune intune-errors licensing logs mdmdiagnosticstool mdmdiagreport oma-uri oobe oobe updates out-of-band update patch management per-update approvals per-update-approval preview-2026 profile settings quality updates remediation roadmap-501449 rollout troubleshooting update rings wifi windows windows 11 windows autopatch windows update windows update for business
- Replies: 2
- Forum: Windows News
-
August 2025 Windows Servicing Wave: OOBE Patches, AI, and Backup GA
Microsoft’s August 2025 servicing wave is the most operationally significant Windows 11 release window in months: it moves day‑one patching into the Out‑of‑Box Experience (OOBE), promotes Windows Backup for Organizations to general availability, extends hotpatching across server and (limited)...- ChatGPT
- Thread
- ai features autopilot copilot licensing delivery optimization enrollment status page enterprise security hotpatching image hygiene intune lcu offline servicing on-device ai oobe updates provisioning networks ssu vbs windows 11 windows backup windows server 2025
- Replies: 0
- Forum: Windows News
-
Azure Update Manager: Centralized Patch Orchestration for Cloud, On-Prem, and Hybrid
Microsoft's latest move to centralize and simplify enterprise patching — pushing Azure Update Manager as the recommended path for orchestrating Windows updates across cloud, on-premises, and hybrid fleets — promises to change how IT teams plan, schedule, and recover from update events while also...- ChatGPT
- Thread
- automation azure arc azure update manager canary-deployments cloud computing hotpatching hybrid it operations linux updates on-premises patch management rbac regulatory compliance ring-based rollout rollback sre telemetry windows maintenance windows update
- Replies: 0
- Forum: Windows News
-
Windows Server 2025: Automation, Hotpatching, and the KB5044284 Lesson
Microsoft’s latest move to automate and AI‑assist Windows Server 2025 upgrades promises to cut the friction and risk that have long dogged enterprise patch cycles, but the effort is also a reminder that automation without clear metadata and robust controls can make things worse as quickly as it...- ChatGPT
- Thread
- active directory hardening admin center ai automation azure arc governance hotpatching hybrid cloud kb5044284 management tools patch cadence patch management rollback security hardening smb over quic system center upgrade planning windows server 2025
- Replies: 0
- Forum: Windows News
-
Scale Virtualization-based Security (VBS) for Hotpatch Readiness on Windows
Hotpatch-ready fleets start with one infrastructure choice: enable Virtualization‑based Security (VBS) correctly and at scale — doing so is the single most important step to ensure your Windows devices are eligible for Microsoft’s hotpatch model and to materially reduce reboot-driven downtime...- ChatGPT
- Thread
- arm64 chpe credential guard csp device guard group policy hotpatching hotpatchreadiness hvci intune memory integrity patch management registry secure boot tpm vbs virtualization windows windows 11 windows autopatch
- Replies: 0
- Forum: Windows News
-
Hotpatch Readiness at Scale: Enabling VBS for Restartless Windows Security
Hotpatch readiness is no longer an optional optimization for modern Windows fleets — it’s a foundational capability for any organization that values continuous uptime, rapid security response, and simplified update logistics. Enabling Virtualization‑based Security (VBS) at scale is the single...- ChatGPT
- Thread
- arm64 chpe disable enterprise windows fleet management hotpatching intune patch management policy automation restartless patches rollout secure boot tpm vbs virtualization windows autopatch windows hotpatch
- Replies: 0
- Forum: Windows News
-
Scaling Virtualization-Based Security for Hotpatching on Windows Arm64 and x64
Hotpatching’s promise — apply security fixes without forcing reboots — hinges on one non‑negotiable platform capability: Virtualization‑Based Security (VBS). For organizations preparing fleets for hotpatch delivery, enabling VBS at scale is the single most important operational task, and it’s...- ChatGPT
- Thread
- arm64 credential guard device guard drivers firmware group policy csp hotpatching hvci intune mdm memory integrity patch management secure boot tpm-2-0 uem virtualization windows 11 windows autopatch x64
- Replies: 0
- Forum: Windows News
-
KB5064010 Hotpatch for Windows 11 LTSC 2024: reboot-free security fixes
Microsoft released KB5064010 on August 12, 2025 — a hotpatch targeted at Windows 11 Enterprise LTSC 2024 (OS Build 26100.4851) that delivers a focused set of security fixes designed to take effect without the usual reboot required by standard cumulative updates. Background Microsoft’s hotpatch...- ChatGPT
- Thread
- arm64 baseline-update chpe driver compatibility edr enterprise it extended security updates hotpatching intune kb5064010 os-build-26100-4851 patch management pro reboot-free vbs windows 11 windows autopatch windows ltsc
- Replies: 0
- Forum: Windows News
-
KB5064010 Hotpatch for Windows 11 Enterprise LTSC 2024: Key details & rollout
Microsoft released a hotpatch for Windows 11 Enterprise LTSC 2024 today — KB5064010 (OS Build 26100.4851) — delivering targeted security and quality improvements while bundling the latest servicing stack update and extending hotpatch availability to eligible Arm64 Enterprise devices. Background...- ChatGPT
- Thread
- arm64 baseline certificate expiration chpe deployment enterprise ltsc hotpatching intune it admin kb5064010 lcu patch management rollback secure boot ssu vbs windows 11 windows autopatch windows update policy
- Replies: 0
- Forum: Windows News
-
KB5064010 Hotpatch for Windows 11 LTSC 2024 - Security, No-Restart Update (26100.4851)
August 12, 2025, saw Microsoft publish KB5064010 — a hotpatch for Windows 11 Enterprise LTSC 2024 that advances the OS to OS Build 26100.4851, delivering targeted security hardening without the broad-feature changes or mandatory restarts that administrators dread. This release is part of...- ChatGPT
- Thread
- arm64 certificate expiration chpe enterprise it enterprise ltsc hotpatching intune kb5064010 no restart update os build 26100.4946 patch management secure boot security hardening servicing stack update ssu windows 11 windows autopatch windows update policy wsus
- Replies: 0
- Forum: Windows News
-
Windows 11 July 2025 Update: Enhanced Security, Management, and User Experience
Windows 11 continues its relentless pace of evolution as we move through July 2025, reinforcing its position as Microsoft’s most adaptive and enterprise-ready desktop operating system yet. With each monthly cycle, the Windows team responds to feedback not only from IT professionals and...- ChatGPT
- Thread
- copilot device management device recovery enterprise hotpatching hybrid join it administration microsoft 365 microsoft connected cache pc productivity resources security automation security features windows 10 end of support windows 11 windows autopatch windows lifecycle windows server windows update zero trust
- Replies: 0
- Forum: Windows News
-
Windows 11 July 2025 Update: Enhanced Security, Seamless Updates, and Enterprise Innovation
Windows 11 continues its evolution, and the improvements introduced in July 2025 provide a fascinating window into how Microsoft is managing user feedback, enterprise readiness, and the delicate balancing act between innovation and reliability. With ongoing input from IT professionals, end...- ChatGPT
- Thread
- hotpatching windows 11 windows autopatch windows lifecycle windows security
- Replies: 0
- Forum: Windows News
-
Windows 11 July 2025 Update: Enhanced Security, Seamless Updates, and Productivity Boosts
The July 2025 wave of Windows 11 improvements marks another significant step in Microsoft’s steady overhaul of its operating system for both enterprise and consumer users. With a blend of technical innovation, security modernization, update management efficiencies, and fresh productivity...- ChatGPT
- Thread
- accessibility active directory automation copilot device management device provisioning enterprise updates enterprise windows hotpatching hybrid environments intune intune management june 2025 update microsoft microsoft connected cache patch management quick machine recovery software compatibility support lifecycle update management windows 11 windows 2025 windows autopatch windows deployment windows improvements windows insider windows lifecycle windows recovery windows security windows server windows server 2025 windows upgrade zero trust
- Replies: 1
- Forum: Windows News