Today is Microsoft's July 2025 Patch Tuesday, which includes security updates for 137 flaws, including one publicly disclosed zero-day vulnerability in Microsoft SQL Server.

The Play ransomware attacks that have been observed leveraging the CVE-2025-29824 zero-day vulnerability are indicative of cybercriminals upping the stakes.

May 2024: A critical SharePoint vulnerability warrants attention this month, but it is another flaw that seems to be linked to the infamous Qakbot malware that is drawing attention.

June is set to be a relatively quiet month for sysadmins, with Microsoft patching just two zero-day vulnerabilities – one of which has been exploited in the wild. The exploited zero-day is ...