Microsoft prepares for 'calm' Patch Tuesday
Following last month’s heavy security bulletin and an emergency out-of-cycle patch, November looks to be the quietest Patch Tuesday in recent memory.

After recently giving IT administrators a headache with a serious out-of-cycle security patch, Microsoft has announced a rather quieter Patch Tuesday.'
The software giant has issued just two bulletins for the upcoming patch release next week. One is considered critical' and patches a vulnerability in Microsoft Windows and Microsoft Office related to a remote code execution. The other flaw is rated as important.'
It is a marked contrast to last month's security advisories when Microsoft had to fix 11 vulnerabilities, with four being rated as critical.
More serious was a rushed out emergency patch which was released at the end of last month, and was the first time one had been issued since April of last year. It also resulted in reports of attack code being developed to take advantage of the vulnerability.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
-
Cleo attack victim list grows as Hertz confirms customer data stolen
News Hertz has confirmed it suffered a data breach as a result of the Cleo zero-day vulnerability in late 2024, with the car rental giant warning that customer data was stolen.
By Ross Kelly
-
Lateral moves in tech: Why leaders should support employee mobility
In-depth Encouraging staff to switch roles can have long-term benefits for skills in the tech sector
By Keri Allan