Windows Server stories
Defenders face added pressure as the update covers two actively exploited flaws and a SharePoint bug that could enable remote code execution.
Firms with manually rotated ADFS certificates could still be exposed, as attackers may recover live signing keys and forge SAML logins.
Customers will avoid Windows Server licensing costs as 10ZiG shifts endpoint management to a Linux appliance with tighter controls and lower overhead.
The update gives Microsoft customers faster visibility into AI-driven access risks, after Netwrix linked broader identity footprints to higher breach rates.
Older, internet-facing IIS servers are being singled out by China-linked hackers, with one new cluster able to persist despite partial containment.
Older servers may be unprotected for years because some backup providers no longer fully support them, risking recovery failures and audit breaches.
Domain controllers face urgent patching after a Netlogon flaw was rated 9.8, with no privileges or user interaction needed for exploitation.
Small businesses can now automate on-premise network checks with AI agents, without exposing monitoring data to outside cloud services.
Omnissa expands Workspace ONE with Windows Server management, aiming to cut costs and simplify IT operations with one cloud console.
Security teams can now watch Windows Server workloads in real time across AWS, Google Cloud and Azure, reducing blind spots in mixed estates.
An exploited SharePoint spoofing bug is among 167 fixes, as Microsoft also patches a critical unauthenticated Windows RCE and a Defender flaw.
Arctic Wolf says attackers are actively exploiting a critical BeyondTrust vulnerability in self-hosted remote access systems.
Microsoft rolls out fixes for 55 Windows flaws, including six exploited zero-days hitting Shell, MSHTML, Word and key desktop services.
China-linked Warlock ransomware group exploits SmarterMail flaw for admin takeovers, chaining features to gain full Windows control.
Tanium again tops IDC MarketScape rankings, named a Leader for worldwide Windows-focused endpoint management tools for 2025-2026.
Cybersecurity in 2026 pivots from building higher walls to one core question: how fast can organisations recover when attacks inevitably hit?.
Cyber chiefs warn a widening gap between cyber plans and real resilience as boards eye 2026 with only marginal spend increases.
Microsoft fixes a Windows zero-day used in attacks and Office flaws that can execute code when emails are merely received or previewed.
Customers seeking cloud moves may see lower risk after the Auckland-based firm proved repeatable delivery on Azure database and infrastructure migrations.
The utility has cut vulnerability response from days to hours, helping protect 900,000 South Australian homes and businesses from outage risk.
