A working public proof of concept for Certighost (CVE-2026-54121) now gives attackers a practical route from an ordinary domain account to full Active Directory compromise. Microsoft patched the AD CS authorization flaw on July 14, but the exploit was published 10 days later.

Source

Microsoft has released a new, comprehensive hardening guide for Windows Server. As AI-driven attacks grow more dangerous by the hour, it is crucial to take a more rigorous approach to security.

Source

Microsoft has linked the July 23 disruption that blocked Windows 11 downloads to an error in an automated network-maintenance change. The incident affected connectivity in Azure’s West US region from 14:44 UTC until 19:41 UTC, disrupting Windows Update, the Microsoft Update Catalog, Microsoft Store, and Windows Server Update Services (WSUS). Users and administrators saw failed downloads, timeouts, delayed updates, and problems installing Store applications.

Source

Microsoft is introducing a new security feature called KMS Hardware-Secured to protect Key Management Service (KMS) activation. This feature uses Trusted Platform Module (TPM) attestation to verify the hardware integrity of your activation servers. Starting with Windows Server 2025, you can assess your infrastructure's readiness for this change. In a future Long-Term Servicing Channel (LTSC) release, this hardware-based verification will become mandatory. This article explains the technical requirements and how you can prepare your environment.

Source

Microsoft has issued manual remediation steps for Windows Server Update Services (WSUS) servers that are stuck with long synchronization times or outright sync timeouts. The problem affects WSUS on supported Windows client and server platforms and can prevent administrators from deploying updates through WSUS or Configuration Manager.

Source

Microsoft has confirmed service degradation in Windows Server Update Services that produces longer synchronization times and timeouts. The problem was listed on the Windows Release Health dashboard on July 17 after peaking around July 13. It originates in Microsoft’s update infrastructure from an accumulation of publishing metadata that slows WSUS operations.

Source

The newly discovered Spirals ransomware, written in Rust, utilizes a rapid attack timeline to move from initial breach to full network encryption in less than a day. Attackers gain entry by compromising internet-facing IIS web servers to deploy web shells and establish interactive sessions through the IIS worker process. Once inside, the threat actors escalate privileges by bypassing User Account Control and enabling the Remote Desktop Protocol for persistent access.

Source

Microsoft has issued a formal 90-day reminder that mainstream support for Windows Server 2022 will conclude on October 13, 2026. After this date, the operating system enters an extended support phase that is scheduled to last until October 14, 2031. During this five-year period, the vendor will continue to provide critical security patches at no additional cost to customers.

Source

Microsoft's Windows Server vNext preview program has introduced three significant features since build 29531, released on February 12, 2026: boot support for the Resilient File System (ReFS), a built-in NVMe-over-Fabrics (NVMe-oF) initiator for high-performance network storage, and Quick Machine Recovery (QMR) for automated recovery from boot failures. Build 29621, released July 13, 2026, adds an early implementation of Trusted Launch for Hyper-V virtual machines. This article covers what each feature does, its requirements, and its current limitations.

Source

Windows Server Insider Build 29621 introduces Trusted Launch for Generation 2 virtual machines to bolster security during the boot process. This feature automatically enables Secure Boot and provisions a virtual Trusted Platform Module (vTPM) to defend against firmware-level attacks. The vTPM state is specifically protected at rest, ensuring that sensitive cryptographic data remains secure even when the virtual machine is not running.

Source

Microsoft’s July 2026 Patch Tuesday has set a new record by addressing 570 vulnerabilities, nearly tripling the volume of previous monthly releases. This massive surge is attributed to the implementation of a new AI-powered vulnerability discovery system designed to scan the Windows codebase for flaws. The release includes 60 critical vulnerabilities, primarily focusing on remote code execution and elevation of privilege issues across Windows, Office, and SharePoint.

Source

A security researcher has released a proof-of-concept exploit named LegacyHive that targets the Windows User Profile Service (ProfSvc). This vulnerability allows for local elevation of privileges by forcing the system-level service to load arbitrary registry hives. The exploit remains functional on all currently supported versions of Windows desktop and server, even after applying the July 2026 Patch Tuesday updates.

Source

Microsoft has launched its July 2026 security updates for Exchange Server, providing critical fixes for the Subscription Edition (SE) and legacy on-premises versions. The release addresses several high-severity vulnerabilities, including a critical spoofing flaw (CVE-2026-55008) with a CVSS score of 9.6 and a remote code execution bug. While the update for Exchange SE is publicly available, updates for Exchange 2016 and 2019 are restricted to organizations enrolled in the Period 2 Extended Security Update (ESU) program.

Source

A threat actor recently utilized an AI-generated PowerShell script to conduct reconnaissance within a compromised Active Directory environment. The intrusion began after the attacker gained access to a domain-joined Windows Server via Remote Desktop Protocol using previously stolen credentials. Once inside, the intruder staged tools in the ProgramData directory and executed a script designed to map users, groups, and domain controllers.

Source

CWWK N150 2x10GbE 3x NVMe 6 Bay NAS Motherboard Review The CWWK NAS-N150-6P is a Mini-ITX NAS motherboard built for compact DIY storage systems, with the reviewed version using Intel’s N150 processor. This is a 4-core, 4-thread Twin Lake CPU with a 6W processor base power and a maximum turbo frequency of 3.6GHz, so it […]

Don’t Buy the WRONG Hardware KVM – Use This Guide To Get it Right, First Time! Remote access is often treated as a software problem, but there are situations where software alone is not enough. A physical remote KVM sits between you and the target computer at the hardware level, giving remote access to the […]

Microsoft prolonge d'un an le Hotpatching de Windows Server 2022 Datacenter: Azure Edition, jusqu'en octobre 2027. À une condition près.

Le post Windows Server 2022 : le Hotpatching prolongé jusqu’en octobre 2027 a été publié sur IT-Connect.

Découvrez comment activer et configurer DNS-over-HTTPS (DoH) sur un serveur DNS Windows Server 2025, avec la gestion du certificat, pour chiffrer les flux DNS.

Le post Windows Server 2025 : comment configurer le DNS-over-HTTPS sur le serveur DNS ? a été publié sur IT-Connect.

Synology Prime Day Deals – 10-25% OFF (DS925+, DS1525+, DS425+ and MORE) Synology has really gone big on these latest deals for Prime Day 2026, which is a massive surprise after years of them being incredibly restrained and conservative at these sales events. With HDD and SSD prices steadily increasing throughout 2026, most users have […]