Newsletter Archives

• April’s deluge of patches

  Posted on April 14, 2025 at 02:42 CDT by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  It’s a good thing we no longer receive individual updates fixing each unique vulnerability. If we did, we’d be calling “uncle” right about now.

  Historically, the number of patches released each April tends to be large. I attribute this to the final end of the holiday slump, when the folks at Microsoft are back up to full steam and working on fixes with gusto.

  This time around, there are 124 vulnerabilities in Windows, Office, Azure, .NET, Visual Studio, BitLocker, Kerberos, Windows Hello, OpenSSH, and Windows’ Lightweight Directory Access Protocol (LDAP).

  Read the full story in our Plus Newsletter (22.15.0, 2025-04-14).

  Patch Watch CVE-2024-21302, CVE-2025-21204, CVE-2025-26670, CVE-2025-29809, inetpub, KB5002623, KB5002700, KB5055581, KB5057589, Microsoft Edge, Newsletters, Office 2016, Patch Lady Posts, Windows 11 24H2

• Businesses in the crosshairs

  Posted on March 17, 2025 at 02:41 CDT by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  But first, a personal note.

  As you know by now, the founder of this site, Gregory Forrest “Woody” Leonhard, passed away unexpectedly on March 8, 2025.

  When Woody retired from freelance writing in 2020, he reached out to ask whether I wanted to take over the AskWoody.com site. He wanted to spend more time with his family and pursue other, personal interests. I didn’t hesitate for a second.

  Read the full story in our Plus Newsletter (22.11.0, 2025-03-17).

  Patch Watch Apple, CVE-2025-24984, CVE-2025-24991, CVE-2025-24993, CVE-2025-26633, Internet Printing Protocol, iOS, IPP, Newsletters, Patch Lady Posts, Remote Code Execution, SQL Server 2019, USB Printers, Web Browsers, Windows 11 24H2

• To reboot, or not to reboot

  Posted on March 3, 2025 at 02:42 CST by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  Why do we need to reboot our computers?

  Why can’t they just run 24/7 without issue? And why is Windows more likely to require rebooting than other systems?

  Normally, I take rebooting for granted, as a matter of fact. This dates very far back. I remember tech support agents on the phone, asking whether I had rebooted a PC and then — regardless of the answer — asking me to reboot again. Recently, I stumbled upon a bug that was interesting enough to cause me to raise this question.

  Read the full story in our Plus Newsletter (22.09.0, 2025-03-03).

  Patch Watch Linux, macOS, Newsletters, Patch Lady Posts, Rebooting, Windows

• Patching embedded code

  Posted on February 24, 2025 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 22.08 • 2025-02-24

  PATCH WATCH

  

  By Susan Bradley

  I’m here to state that patching firmware is easy.

  Easy, that is, if you can get over a big hurdle — knowing what device you have and where to find the proper firmware update.

  If you have a home-built or custom-built computer, often the hardest part is remembering which motherboard and accessory cards were installed. Then something turns out to be not quite right, and you’re in a pickle.

  Read the full story in our Plus Newsletter (22.08.0, 2025-02-24).
  This story also appears in our public Newsletter.

  Patch Watch BIOS, Drivers, Firmware, Firmware Update, Newsletters, Patch Lady Posts, Printers, Surface firmware update, System Information Viewer

• February — Same number of patches, fewer bugs

  Posted on February 17, 2025 at 02:43 CST by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  This month we have a more “normal” patch release of 57 vulnerabilities.

  Although that’s a “woo-hoo” for the security researchers, you and I will still see the same old security updates being offered. That is, we will see a Windows security update.

  What also hasn’t changed is my stance toward Windows 11 24H2. If you buy a computer with it, stay there. If you are already on it and see no issues, stay there. But if you haven’t yet installed the 24H2 feature release on your existing Windows 11 23H2 machine, I still recommend holding back, especially for businesses. For consumers, the risk is less — as long as you are not a gamer.

  Read the full story in our Plus Newsletter (22.07.0, 2025-02-17).

  Patch Watch Apple updates, CVE-2025-21194, CVE-2025-21376, CVE-2025-21387, CVE-2025-21391, CVE-2025-24200, KB890830, Netlogon, Newsletters, Outlook (new), Patch Lady Posts, System Guard, Windows 11 24H2

• Understanding CVE

  Posted on January 27, 2025 at 02:21 CST by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  Vendors track issues using the Common Vulnerabilities and Exposures (CVE) database.

  Maintenance of the database is handled by the MITRE Corporation under the sponsorship of the Cybersecurity and Infrastructure Security Agency (CISA), part of the US Department of Homeland Security. It has been operating since 1999. In 2021, MITRE launched a new website with the domain cve.org and with new features and capabilities.

  Read the full story in our Plus Newsletter (22.04.0, 2025-01-27).

  Patch Watch CISA, CVE, CVE-2025-21309, Documentation, Newsletters, Outlook, Outlook (classic), Outlook (new), Patch Lady Posts, Windows Mail

• Saying no to patches

  Posted on January 20, 2025 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 22.03 • 2025-01-20

  PATCH WATCH

  

  By Susan Bradley

  Both Apple and Microsoft are providing updates and options that are unnecessary.

  The good news for you Apple users is that the company is not taking a page out of Microsoft’s forced-change model and instead is letting us easily opt out of AI features. Clearly, it learned from its 2014 blunder — forcing the U2 album Songs of Innocence to iTunes on all iPhones.

  When you receive a pop-up on your Apple device that supports Apple Intelligence, you get a “Not now” option that allows you to easily dismiss the request. For now, Apple’s AI is still somewhat limited and covers only writing, email, and Siri. More AI capabilities are to come later, but it’s good to see that we can easily opt out.

  Read the full story in our Plus Newsletter (22.03.0, 2025-01-20).
  This story also appears in our public Newsletter.

  Patch Watch 0x80070643, Apple Intelligence, BitLocker, Copilot, CVE-2025-21297, CVE-2025-21309, Device Encryption, Drive Encryption, KB5050411, Newsletters, Outlook (new), Patch Lady Posts

• Closing the books on a buggy year

  Posted on December 16, 2024 at 02:41 CST by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  We’re closing the patching year with an AI-related bug that — fortunately — is not related to Copilot, Recall, or any other AI-related product released by Microsoft in the last few months.

  In fact, you may not have heard of it at all. Called Microsoft Muzic, it’s a research project in understanding music via deep learning and artificial intelligence. It also introduced a vulnerability into your computer if you installed it.

  Read the full story in our Plus Newsletter (21.51.0, 2024-12-16).

  Patch Watch CVE-2024-49063, CVE-2024-49112, CVE-2024-49117, CVE-2024-49138, Exchange, Google Workspace, Hyper-V, KB5002652, Newsletters, Outlook, Patch Lady Posts, TPM, Windows 11 24H2
• « Older Entries