CrowdStrike is investigating FalconFlank, a public proof-of-concept that allegedly enables local privilege escalation through Falcon Sensor’s Microsoft Office malicious-macro remediation workflow. Until the investigation is complete, the company recommends disabling the “Microsoft Office File Suspicious Macro Removal” Windows policy setting on affected Windows 11 25H2 and Windows Server 2025 systems.

Source

CISA has confirmed that ransomware gangs are exploiting CVE-2025-60710, a Windows Task Host privilege-escalation flaw affecting Windows 11 and Windows Server 2025. Microsoft patched the vulnerability in November 2025, but CISA has not disclosed which ransomware operations or attacks are using it.

Source

Découvrez comment activer et configurer DNS-over-HTTPS (DoH) sur un serveur DNS Windows Server 2025, avec la gestion du certificat, pour chiffrer les flux DNS.

Le post Windows Server 2025 : comment configurer le DNS-over-HTTPS sur le serveur DNS ? a été publié sur IT-Connect.