Microsoft has extended Windows Server 2022 hotpatching until October 2027, one year after the mainstream end date of October 2026. This change is effective immediately, and the existing hotpatch cadence will remain unchanged through October 2027.
What Happened
The extension of hotpatching support is a significant development in the cybersecurity landscape, particularly as malicious actors continue to exploit unpatched vulnerabilities in other systems. For instance, Microsoft's Detection and Response Team (DART) recently discovered that unpatched SharePoint servers had been compromised by multiple attackers, highlighting the importance of keeping systems up to date.
SocGholish Takedown Highlights Malicious TDS Threats
SocGholish, a malicious traffic distribution system (TDS), has been used by cybercrime groups such as Evil Corp to gain initial access into victims' networks. This highlights the need for organizations to prioritize patching and updating their systems to prevent similar attacks.
Why It Matters
The extension of hotpatching support for Windows Server 2022 Datacenter: Azure Edition is a crucial step in ensuring the security of systems that rely on this technology. However, it also underscores the ongoing threats faced by organizations in the cybersecurity landscape.
FortiBleed Attackers Turn Firewalls Into Credentials Stealers
The FortiBleed attackers have engineered a Golang-based sniffer to target 430,000 FortiGate firewalls, identifying 110 million credentials in the ongoing global campaign. This highlights the need for organizations to be vigilant in monitoring their systems for potential vulnerabilities.
What Experts Say
"Hotpatch update support for Windows Server 2022 Datacenter: Azure Edition has been extended to October 2027," Microsoft said in a statement. "This change is effective immediately, and the existing hotpatch cadence will remain unchanged through October 2027."
"Modern attacks are not always isolated events. Sometimes they are overlapping campaigns." — Microsoft
Key Facts
- Who: Microsoft
- What: Extended Windows Server 2022 hotpatching until October 2027
- Where: Windows Server 2022 Datacenter: Azure Edition
Key Numbers
- 2027: Year until which Windows Server 2022 hotpatching has been extended
Background
Microsoft's extension of hotpatching support for Windows Server 2022 Datacenter: Azure Edition is a significant development in the cybersecurity landscape. However, it also highlights the ongoing threats faced by organizations in this space.
What Comes Next
As the cybersecurity landscape continues to evolve, organizations must prioritize patching and updating their systems to prevent attacks. The extension of hotpatching support for Windows Server 2022 Datacenter: Azure Edition is a crucial step in this direction.