Tag

#patching

2 posts tagged #patching.

Field Note · Jun 22, 2026 · Colten Anderson

Patch Tomcat now, but the four-condition RCE probably isn't pointed at you

CVE-2025-24813 carries a 9.8 and a KEV listing, but real-world RCE needs four config conditions to all line up. Here's how to triage it against your actual deployment instead of the headline.
Analysis · May 1, 2026 · Colten Anderson

Hotpatch goes default in Autopatch. You have 10 days.

Microsoft flips hotpatch on by default for all Autopatch tenants May 11. If you haven't inventoried your fleet against the requirements, you're about to get a split patching model you didn't plan for.