Security Patch
The latest Security Patch coverage — news, analysis, and updates from the WindowsNews.AI desk.
Parallels Desktop 26 adds macOS Tahoe support and enterprise policy controls.
Parallels Desktop 26 lands just as Apple pivots to a year-based naming scheme for macOS and Microsoft pushes Windows 11 version 25H2 toward general availability—bringing explicit macOS Tahoe...
Windows Server 2016 Support Ends January 2027: Your Migration and ESU Survival Guide
Microsoft will stop delivering security updates for Windows Server 2016 on January 12, 2027, a hard deadline that puts organizations at immediate risk of zero-day attacks, ransomware, and regulatory...
Microsoft Quietly Patches Copilot Flaw That Let Insiders Access Files Without Audit Traces
A security researcher discovered that a simple prompt technique could make Microsoft 365 Copilot summarize sensitive corporate files without leaving the required Purview audit records. Microsoft...
Why Windows 10 Users Are Digging In Their Heels Despite the Looming Security Cliff
October 14, 2025, is not just another Patch Tuesday. It’s the day Microsoft flips the switch on Windows 10, cutting off free security updates, feature enhancements, and official technical support...
Google Chrome 139.0.7258.127 Plugs Aura Use-After-Free (CVE-2025-8882) and Other High-Severity Bugs
Google has deployed a critical stable-channel update for Chrome, version 139.0.7258.127, closing a use-after-free vulnerability in the Aura UI component tracked as CVE-2025-8882. The patch also...
Chrome 139 Fixes High-Severity libaom AV1 Heap Overflow; Edge Patch to Follow
Google has rolled out a stable-channel update for Chrome that patches CVE-2025-8879, a high-severity heap buffer overflow in the libaom AV1 codec library. The fix landed on August 12, 2025, in Chrome...
Urgent Chrome 139.0.7258.127 Update Closes V8 Race Condition (CVE-2025-8880) — Patch Now for Windows, Edge, and Chromium Browsers
On August 12, 2025, Google rushed out Chrome 139.0.7258.127 with an urgent fix for CVE-2025-8880 — a high-severity race condition in the V8 JavaScript engine that could hand remote attackers the...
Chrome's File Picker Cross-Origin Leak Prompts Emergency Patch for Windows Browsers
A critical logic flaw in Chromium's File Picker—one of the browser's most sensitive UI components—can be weaponized to leak data across origins, forcing Google and Microsoft to ship urgent...
Rockwell's FactoryTalk Linx Flaw Scores 9.0: Deploy v6.50 Patch Now to Block Token Bypass
A critical vulnerability in Rockwell Automation’s FactoryTalk Linx allows attackers to bypass FTSP token validation and manipulate industrial communication drivers simply by flipping a Node.js...
Microsoft Closes Excel Heap Overflow Remote Code Execution Hole (CVE-2025-53737) — Patch Now
Microsoft’s April 2025 security updates included a fix for a heap overflow vulnerability in Excel that attackers could exploit to run arbitrary code on a victim’s machine. Tracked as...
Microsoft Patches Dynamics 365 On-Prem Flaw CVE-2025-53728 That Exposes Sensitive Data
Microsoft has released a security update to fix an information disclosure vulnerability in Dynamics 365 on-premises versions, tracked as CVE-2025-53728. The flaw, classified as allowing an...
CVE-2025-53153: Microsoft Patches Information-Disclosure Flaw in Windows RRAS — What Admins Must Do
Microsoft’s April 2025 Patch Tuesday brought a crucial fix for CVE-2025-53153, an information-disclosure vulnerability residing in the Windows Routing and Remote Access Service (RRAS). The...