Back to today’s briefing

Story perspectives

Microsoft Patches 161 Vulnerabilities, Urges Immediate Updates

1/15/2025

26 3

Summary

Microsoft Patches Vulnerabilities

On January 2025 Patch Tuesday, Microsoft tackled a staggering 161 vulnerabilities, including three dangerous zero-day flaws in Hyper-V that could let attackers escalate privileges to SYSTEM. With 12 critical vulnerabilities also patched across Windows products, users are strongly urged to update their systems without delay to safeguard against potential threats.

Summary

Fortinet Warns Vulnerability

Fortinet has issued a warning about a severe zero-day vulnerability (CVE-2024-55591) in its firewalls, impacting FortiOS versions 7.0.0 to 7.0.16. This flaw allows hackers to seize super-admin privileges, threatening corporate networks. To safeguard against attacks, Fortinet recommends disabling management interfaces and restricting access. They also released patches for another critical vulnerability (CVE-2023-37936).

History

Historical Context

Microsoft's January 2025 Patch Tuesday highlights ongoing cybersecurity challenges. Since the introduction of Patch Tuesday in 2005, Microsoft has regularly addressed vulnerabilities, including critical zero-day flaws. Historical incidents, such as the WannaCry ransomware attack in 2017, underscore the urgency of timely updates. As cyber threats evolve, the need for swift patching remains critical for user safety and network integrity.

1 of 3

Microsoft Patches Vulnerabilities

On January 2025 Patch Tuesday, Microsoft tackled a staggering 161 vulnerabilities, including three dangerous zero-day flaws in Hyper-V that could let attackers escalate privileges to SYSTEM. With 12 critical vulnerabilities also patched across Windows products, users are strongly urged to update their systems without delay to safeguard against potential threats.

1 / 3