2026 January MS Patch Tuesday

There are 112 vulnerabilities addressed this month. There are 6 criticals in Office and Windows that may allow remote code exploits. There is a patch for Windows Desktop Window Manager that is being actively exploited. This vulnerability (CVE-2026-20805) is rated as...

September Microsoft Patch Updates

There were approximately 80 CVEs addressed in this patch set. Most of the CVSS scores were lower than prior months.  For the highest vulnerabilities, exploit requires viewing malicious content or use of the Microsoft High Performance Computing Pack.  There are...

June Microsoft Patch Tuesday

There are multiple critical patches for June.  Please note that if additional attack vectors or new exploits are released the priority for remediation will change. Testing and patching should be started for all systems. Systems using  Microsoft Office,...

Update for Tenable Agents version 10.8.2

The Tenable agents used to scan the UD environment for vulnerabilities has released a updated version 10.8.2 that fixes multiple issues including an bug that will cause some versions to go offline during plugin updates. Security Operations will be reaching out to...

November Microsoft Vulnerability Notice

There are multiple critical patches for November.  Please note that if additional attack vectors or new exploits are released the priority for remediation will change. Kerberos issues (CVE-2024-43639) will require expedited remediation if credible exploits are...

Apple Safari Vulnerability Notice

Documented exploits are now available that chain multiple vulnerabilities in the Safari web browser on iOS and OSX to access webcam and audio without normal user consent alerts. This vulnerability is in Apple Safari and is not known to impact other browsers. Central...