CISA ordered federal agencies on Thursday to secure their systems against a critical Microsoft Configuration Manager vulnerability patched in October 2024 and now exploited in attacks.

IT admins will be busy this month patching Microsoft software and apps, but not nearly as busy as they were in January.

Microsoft patches 58 vulnerabilities, including six actively exploited zero-days across Windows, Office, and RDP, as CISA sets a March 3 deadline.

Windows 11 is adding Baseline Security Mode to block unsigned apps, services, and drivers by default, plus new consent prompts for sensitive access and bundled installs, with exceptions when needed ...