Attackers have not waited for Exploit Wednesday; the Microsoft Windows zero-day attacks have already started. Here’s what you need to know and do.

CISA adds six Microsoft zero-days to its KEV catalog, confirming active exploitation. The flaws include security bypass bugs and a Remote Desktop privilege escalation issue.

Microsoft's February Patch fixes 6 zero-days - but some Windows users shouldn't update yet ...

Microsoft has patched the Windows Notepad remote code execution vulnerability CVE-2026-20841, warning users to install February 2026 updates to block exploits.

Microsoft releases February 2026 Patch Tuesday updates KB5077181 and KB5075941 for Windows 11. Learn about the latest security fixes and improvements.

Update, April 30, 2025: This story, originally published April 28, has been updated with further information regarding the hotpatching security update service for Windows Server 2025 users, as well as ...

Microsoft is telling Windows 11 users to do something it almost never recommends: roll back a critical security update if their systems start misbehaving. The company has acknowledged that its first ...

Microsoft’s Patch Fixes Are Breaking Windows, Forcing a Second Emergency Update Your email has been sent Microsoft’s own fixes have become its biggest problem, forcing the company to issue a second ...

Facepalm: Microsoft and the PC industry developed the Secure Boot protocol to prevent modern UEFI-based computers from being hacked or compromised during the boot process. However, just a few years ...

Microsoft patches CVE-2026-21525, an actively exploited RasMan flaw that can crash Windows VPN services and disrupt remote ...