server security Archives

Winsage

June 16, 2025

Microsoft: June Windows Server security updates cause DHCP issues

Microsoft has identified an issue with the June 2025 security updates that causes the Dynamic Host Configuration Protocol (DHCP) service to freeze on certain Windows Server systems. This affects the service's ability to apply renewals of unicast IP addresses, impacting network operations. Microsoft has acknowledged that the DHCP Server service may intermittently stop responding after the update and is working on a resolution. Additionally, other issues affecting Windows Server systems have been addressed, including application failures and authentication problems on domain controllers. Out-of-band updates were previously issued to fix bugs causing Hyper-V virtual machines to restart or freeze, and emergency updates were released for issues with Windows containers on certain Windows Server versions.

Winsage

May 28, 2025

Microsoft’s New Windows Update — What It Means For Your Apps

Microsoft is introducing a new Windows Update orchestration platform aimed at creating a unified update strategy that integrates apps, drivers, and all updateable components into a single system. This initiative follows challenges with the current update process, including a controversial security update that caused issues for users. The new platform is currently available for developers and app product teams to explore, and it aims to provide a more cohesive and efficient update experience.

Winsage

May 20, 2025

Securing the Model Context Protocol: Building a safer agentic future on Windows

The Model Context Protocol (MCP) is a lightweight, open protocol functioning as JSON-RPC over HTTP, facilitating standardized discovery and invocation of tools. MCP defines three roles: MCP Hosts (applications accessing capabilities), MCP Clients (initiators of requests), and MCP Servers (services exposing functionalities). Windows 11 will incorporate MCP to enable developers to create intelligent applications leveraging generative AI. An early preview of MCP capabilities will be available for developer feedback. MCP introduces security risks, including cross-prompt injection, authentication gaps, credential leakage, tool poisoning, lack of containment, limited security review, registry risks, and command injection. To address these, Windows 11's MCP Security Architecture will establish security requirements for MCP servers, ensuring user safety and transparency, enforcing least privilege, and implementing security controls like proxy-mediated communication, tool-level authorization, a central server registry, and runtime isolation. MCP servers must comply with security requirements, including mandatory code signing, unchanged tool definitions at runtime, security testing, mandatory package identity, and declared privileges. An early private preview of MCP server capability will be offered to developers post-Microsoft Build for feedback, with a secure-by-default enforcement strategy planned for broader availability. Microsoft aims to enhance defenses continuously and collaborate with partners to bolster MCP's security framework.

Tech Optimizer

May 5, 2025

VIPRE Advanced Security Awarded Highest Ranking in AV-Comparatives’ Malware Protection Test 2025

VIPRE® Advanced Security received the Advanced+ award from AV-Comparatives in the March 2025 Malware Protection Test for its effectiveness against cyber threats. The test evaluated 19 security products using 10,030 malware samples on a Windows 11 system, focusing on both online and offline threats. VIPRE achieved a 98.7% detection rate in all scenarios, a 99.93% overall protection rate during execution testing, and had one of the lowest false positive counts among the products tested. VIPRE's security solutions are integrated into other Ziff Davis products, enhancing their protection capabilities. VIPRE is a subsidiary of Ziff Davis, Inc., specializing in cybersecurity solutions with over 25 years of experience.

Tech Optimizer

April 22, 2025

VIPRE Security Crushes Competition with 99.93% Protection Rate in Latest Test

VIPRE® Advanced Security received the Advanced+ distinction from AV-Comparatives in their March 2025 Malware Protection Test, demonstrating strong capabilities against cyber threats. The test evaluated 19 security products using 10,030 malware samples and included both online and offline scenarios. VIPRE achieved a 98.7% detection rate and a 99.93% overall protection rate during execution testing, with one of the lowest false positive counts among the products tested. VIPRE's security solutions also enhance other Ziff Davis consumer security products, utilizing its threat intelligence cloud to block malicious sites and improve overall protection.

Tech Optimizer

April 22, 2025

VIPRE Security Crushes Competition with 99.93% Protection Rate in Latest Test

VIPRE® Advanced Security received the Advanced+ distinction from AV-Comparatives in their March 2025 Malware Protection Test for its exceptional performance in detecting and preventing malware threats. The test evaluated 19 security products using 10,030 malware samples on a Windows 11 system, focusing on both online and offline threats. VIPRE achieved a 98.7% detection rate in all scenarios, a 99.93% overall protection rate during execution testing, and had one of the lowest false positive counts. VIPRE's security features also enhance other Ziff Davis products, utilizing its threat intelligence cloud to improve protection across various platforms. VIPRE is a subsidiary of Ziff Davis, Inc., and has over 25 years of experience in cybersecurity solutions.

Winsage

October 25, 2024

Microsoft releases new preview build of Windows Server 2025

Microsoft has released build version 26311 as part of the Windows Server Insider Program for Windows Server 2025. This build does not introduce new functionalities but builds on the previous build 26304. It includes Windows Defender Application Control for Business (WDAC), which enhances security by allowing only authorized software to operate. WDAC can be managed through PowerShell cmdlets and is supported by Microsoft's OSconfig security configuration platform. Additionally, build 26311 features the Windows Server 2025 Security Baseline Preview, enabling administrators to configure security settings based on a recommended posture derived from over 350 preconfigured Windows security settings. A default policy is available for installation via OSconfig and PowerShell cmdlets. The build is available for download, with a lifecycle extending until September 15, 2025.

Winsage

October 8, 2024

Microsoft fixes Remote Desktop issues caused by Windows Server update

Microsoft's cumulative updates for October address a significant issue with Remote Desktop connections on Windows servers, specifically related to the RD Gateway service, which began crashing every 30 minutes after the July security updates. This issue, confirmed by Microsoft, is linked to a TSGateway service termination problem that triggers an 0xc0000005 exception code, logged as Event 1000. The affected Windows Server releases include: - Windows Server 2022 (KB5040437) - Windows Server 2019 (KB5040430) - Windows Server 2016 (KB5040434) - Windows Server 2012 R2 (KB5040456) - Windows Server 2012 (KB5040485) Temporary workarounds include blocking connections over the pipeRpcProxy3388 and modifying the RDGClientTransport registry key. Administrators are advised to back up the registry before making changes. Microsoft has previously addressed similar connectivity issues and has also released security updates for October 2024 that fix 118 vulnerabilities, including five zero-days.

Tech Optimizer

September 23, 2024

7 things to consider when choosing a server antivirus program

The reliance on digitization in business has made cyber security for servers essential, with specialized server antivirus solutions being crucial for protection. Servers are particularly vulnerable to cyber threats, necessitating robust detection capabilities in antivirus solutions to identify various types of malware. The performance impact of antivirus software must be considered to avoid disrupting daily business operations, and compatibility with the server's operating system is vital to prevent instability. Regular update frequency is important for maintaining effective security, with automatic updates being preferable. Usability is significant, especially for businesses with limited IT resources, and customer support services should be reliable and accessible. Cost is a key factor in selecting antivirus software, with the aim of finding a cost-effective solution that does not compromise on cybersecurity.

Winsage

August 21, 2024

Windows 11 Insider Dev Channel build 26120.1542 (KB5041872) makes a Widgets taskbar change

Microsoft has released a new Windows 11 build, 26120.1542, for Windows Insider Program participants in the Dev Channel, identified under KB5041872. The update enhances the Widgets feature on the taskbar, introduces a new position for the Widgets entry-point, and adds taskbar navigation enhancements. It also includes bug fixes such as improvements to text suggestions for hardware keyboards, a fix for the emoji panel, and corrections in the Registry Editor. General fixes address issues with adding languages, driver vulnerability updates, Group Policy Preferences, DNS security, PowerShell and VBScript limitations, and BitLocker firmware update failures. Known issues include a repair version notice for certain users and potential crashes in Task Manager.