Know what to patch.
Know how to fix it.

Netlogon Authentication Bypass Allows Instant Domain Controller Takeover

CVE-2020-1472 · Microsoft Windows Server

JNDI Injection via Log Message Input — Critical Zero-Day in Widespread Java Library

CVE-2021-44228 · Apache Log4j

Pre-Authentication SSRF in Exchange Leads to Remote Code Execution

CVE-2021-26855 · Microsoft Exchange Server

VMware vCenter Server Remote Code Execution — VMSA-2021-0010 (CVE-2021-21985)

CVE-2021-21985 · VMware vCenter Server

Enable Script Block Logging to Capture All PowerShell Commands for Forensic Investigation

Hardening

Fix-Windows-Server-Powershell-Script-Block-Logging-Enabled-Hardening.ps1

Enforce NLA on RDP to Require Credentials Before the Remote Desktop Session Loads

Hardening

Fix-Windows-Server-Rdp-Nla-Enforced-Hardening.ps1

Disable SMBv1 to Remove the Attack Surface Exploited by EternalBlue and WannaCry

Hardening

Fix-Windows-Server-Smbv1-Protocol-Disabled-Hardening.ps1

Disable NTLMv1 to Prevent Weak Authentication Hash Cracking and Relay Attacks

Hardening

Fix-Windows-Server-Ntlmv1-Protocol-Disabled-Hardening.ps1

May 2026 Patch Tuesday — Cumulative Security Update for Windows Server 2025

KB Article · just now

Java, Python, Node.js, and .NET Runtimes Must Be Actively Managed and Updated

General guidance · 3d ago

Third-Party Backup Agents Are Frequently Targeted and Must Be Kept Updated

General guidance · 3d ago

Microsoft 365 Apps Must Be Updated Independently from Windows Update

General guidance · 3d ago