Windows Security
The latest Windows Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
CISA Emergency Directive Targets Exchange Hybrid Flaw in August Patch Tuesday Deluge
The Cybersecurity and Infrastructure Security Agency (CISA) issued an emergency directive late Tuesday, ordering federal agencies to secure on-premises Exchange servers within hours after a newly...
Microsoft Patches Publicly Disclosed ‘BadSuccessor’ Kerberos Zero-Day and Exchange Hybrid Cloud Threat in August 2025 Update
Microsoft’s August 2025 security update patches a publicly disclosed Kerberos privilege escalation flaw and a dangerous Exchange hybrid vulnerability that could let attackers hop from on-premises...
Microsoft patches Kerberos 'BadSuccessor' flaw and critical image-parsing bugs in August update
On August 12, 2025, Microsoft shipped its monthly security bundle, and it's one of those months that makes sysadmins reach for extra coffee. Two critical remote code execution (RCE) vulnerabilities...
Microsoft’s August Update Plugs Kerberos Zero-Day; Two 9.8-Rated RCEs Demand Immediate Patching
Administrators rushed to patch domain controllers this week as Microsoft’s August 2025 Patch Tuesday landed with a publicly disclosed Kerberos elevation-of-privilege flaw (CVE-2025-53779) and two...
Epic Unlocks Fortnite for Snapdragon PCs with Native Arm Anti-Cheat in EOS SDK Update
Epic Games and Qualcomm have shattered one of the most stubborn barriers holding back Windows on Arm: kernel-level anti-cheat. With a new Epic Online Services (EOS) SDK release, Easy Anti-Cheat (EAC)...
Six Free Tools That Expose the Real Reason Your Windows PC Is Slow
Slow app launches, random freezes, and file transfers that crawl—most Windows performance problems aren’t mysterious gremlins. They’re the result of measurable issues: a failing hard drive with...
WSL 2.5.10 Fixes TOCTOU Bug: Microsoft Acts Fast on CVE-2025-53788 Privilege Escalation
Microsoft released an out-of-band Windows Subsystem for Linux (WSL) update on August 6, 2025, patching a local elevation-of-privilege vulnerability that could let attackers break out of WSL2...
CVE-2025-50155: Critical Windows Push Notifications EoP Flaw Exposes Systems to Full Takeover
A serious elevation-of-privilege vulnerability in Windows Push Notifications has been cataloged as CVE-2025-50155 by Microsoft, giving authenticated local attackers a clear path to SYSTEM-level...
CVE-2025-53779: New Kerberos Path Traversal Bug Opens Door to Privilege Escalation—Patch Now
Microsoft’s security team has published guidance for CVE-2025-53779, a newly disclosed vulnerability in Windows Kerberos that could let authenticated attackers on the network elevate their...
Windows Admins: CVE-2025-53778 Is a Patch-Now NTLM Privilege Escalation That Threatens Entire Domains
Microsoft has silently added CVE-2025-53778 to its Security Update Guide, flagging a improper authentication flaw in the Windows NTLM implementation that permits an authorized attacker to elevate...
Windows Security App UI Spoofing Flaw CVE-2025-47956 Patched – But Local Attackers Can Still Fake Alerts
Microsoft’s June 2025 security updates address a spoofing vulnerability in the Windows Security App that lets a local user manipulate file names and paths to display forged security alerts. Tracked...
Unverified GDI+ RCE Vulnerability CVE-2025-53766 Prompts Urgent Patch Verification Call
Microsoft’s Security Update Guide has quietly listed a new vulnerability tracked as CVE-2025-53766, describing a heap-based buffer overflow in the GDI+ graphics library that could allow remote code...