windows server

Kaspersky’s Global Research and Analysis Team (GReAT) has publicly exposed an active, server‑focused cyberespionage campaign — tracked as PassiveNeuron — that has compromised Internet‑facing Windows Server systems in government, financial and industrial environments across Asia, Africa and Latin...

Microsoft has pushed an emergency out‑of‑band update after a botched October patch left a critical Windows Server Update Services (WSUS) vulnerability — tracked as CVE‑2025‑59287 — incompletely remediated and actively exploited in the wild, prompting urgent warnings from CISA and multiple...

Microsoft has released an out‑of‑band emergency update to plug a critical remote‑code‑execution hole in Windows Server Update Services (WSUS), and federal and industry authorities warn the flaw — tracked as CVE‑2025‑59287 — is being actively exploited in the wild; immediate action is required...

Microsoft has released an out‑of‑band emergency patch to fix a critical remote code execution vulnerability in Windows Server Update Services (WSUS) — tracked as CVE‑2025‑59287 — and every WSUS host must be treated as a top‑tier remediation priority until it is patched or isolated. The flaw is a...

Microsoft has released an out‑of‑band emergency update to patch a critical remote‑code‑execution vulnerability in Windows Server Update Services (WSUS) — tracked as CVE‑2025‑59287 — and administrators must treat every WSUS host as a top‑tier remediation priority until it is patched or safely...

Microsoft pushed an out‑of‑band emergency update on October 23, 2025 to fix a critical remote code execution vulnerability in Windows Server Update Services (WSUS), tracked as CVE‑2025‑59287, and administrators must treat WSUS hosts as a top‑tier remediation priority until every affected server...

Kaspersky’s Global Research and Analysis Team has exposed a deliberate, server‑focused cyberespionage campaign — tracked as PassiveNeuron — that has targeted Internet‑facing Windows Server machines in government, financial and industrial organizations across Asia, Africa and Latin America...

Kaspersky’s Global Research and Analysis Team (GReAT) has exposed an active, server‑focused cyberespionage campaign — tracked as PassiveNeuron — that specifically targets Windows Server hosts in government, financial and industrial networks across Asia, Africa and Latin America, with activity...

Kaspersky’s GReAT team has pulled back the curtain on a deliberately targeted cyber‑espionage operation they call PassiveNeuron, a campaign that focuses on Windows Server hosts and employs a multi‑stage DLL loader chain, two previously undocumented implants (Neursite and NeuralExecutor) and...

Microsoft has confirmed CVE-2025-59260 as a local information‑disclosure vulnerability in the Microsoft Failover Cluster virtual driver that can write sensitive cluster state into log files or otherwise expose privileged configuration data to low‑privileged local actors, and Microsoft has...

Microsoft has published a security advisory for CVE-2025-59188, an information-disclosure vulnerability in Microsoft Failover Cluster that can allow a low‑privilege, local actor to read sensitive information written to cluster diagnostic/log files; a vendor fix is available and the vulnerability...

Microsoft has published an advisory for CVE-2025-55700: an out‑of‑bounds read in the Windows Routing and Remote Access Service (RRAS) that can allow a remote actor to elicit unintended memory contents from an affected system, resulting in network‑accessible information disclosure; administrators...

Windows Server’s built‑in Data Deduplication can turn wasted disk capacity into usable space, lower backup windows and storage costs, and extend the life of existing arrays — but only when it’s planned, configured, and monitored correctly. Background Data Deduplication (Windows Server feature)...

The short list of books that every Windows admin should consider in 2025 centers on practical, hands‑on titles that reflect the operating system Microsoft shipped for enterprise environments and the management toolsets used today—books that teach Windows Server administration, PowerShell...

Bloomberg’s Managed Systems Engineering team is hiring an Infrastructure Engineer — Windows Services to lead a global effort to modernize and harden the company’s Active Directory (AD) estate, manage the Windows server fleet, and operate identity and access services at massive scale; the role is...

Below is a long-form feature article you can use on WindowsForum.com. It summarizes ANSSI’s guidance (the “Start‑up security for Windows servers” publication you linked), validates and expands that guidance against Microsoft and CIS recommendations, and gives a practical, step‑by‑step playbook...

At the end of September 2025 several administrators reported a recurring and highly disruptive pattern: Remote Desktop Session Host (RDS / Remote Desktop Server) instances would suddenly stop responding to user input while sessions remained “attached” and displayed only a black screen — and...

Ziff Davis’s engineering team and AWS partnered to replace an ad hoc, error-prone Windows server provisioning process with an automated, repeatable pipeline built on EC2 Image Builder and AWS Systems Manager — delivering consistent IIS hosts, simplified patching, and faster recovery while...

Part 2 of this two-part series moves from licensing and Active Directory decisions into the hands‑on mechanics you must master to migrate Windows Server workloads to Amazon EC2: choosing the correct virtualization platform and instance family, verifying boot‑mode compatibility (UEFI vs Legacy...

Microsoft has pushed a new Windows Server vNext Insider preview — Build 26491 — and for the first time the server preview channel is shipping with flighting (in‑place OS upgrade via Windows Update) enabled for Desktop Experience installations. That single operational change shifts how...