Urgent.News

What's breaking now, across thousands of outlets.

Tech

Microsoft won't patch old Windows Servers, so a small security firm is doing it

The 0patch service recently unveiled a new set of patches for several "dead" versions of Windows Server. The updates are designed to address a dangerous security vulnerability Microsoft disclosed in August. Although the flaw has been fixed in supported Windows editions, it remains a threat to older versions that no... Read Entire Article

Microsoft won't patch old Windows Servers, so a small security firm is doing it

A Slovak security firm named Acros Security has launched a service called 0patch, which focuses on safeguarding aging software, particularly Windows Server operating systems. Microsoft has officially discontinued support for these older versions, leaving them vulnerable to security threats. 0patch's service provides micro-patches to address vulnerabilities in these unsupported versions, including a critical remote code execution flaw in the Windows DNS Server service, as disclosed by Microsoft in August 2026.

By delivering these micro-patches while the operating system is running, Acros Security's solution allows organizations to maintain security without requiring a reboot or traditional software update installation. This approach is distinct from the regular Windows Update method. The new patches target Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2, which share core codebases with Windows 7, Windows 8, and Windows 8.1.

Acros Security plans to expand its support to cover more unsupported Windows releases in the near future, including Windows 10 version 22H2, which is scheduled for enrollment in the first year of Extended Security Updates (ESU) in October 2026.

Written by urgent.news from TechSpot's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.

Also reported by 1 other outlet

Read the original at techspot.com →

More in Tech

Your MCP Server Is the Attack Surface Now

Your MCP Server Is the Attack Surface Now October 2026 has been the worst month yet for Model Context Protocol security. Not because attackers discovered something new, but because they keep…

  • MCP Server security crisis in October 2026
  • CVE-2026-105697 allows OS command execution via command field
  • RelayShield MCP Proxy Firewall provides runtime protection

Every CISO Needs an AIBOM in 2026 — Most Vendors Ship Theater

A friend of mine runs security at a mid-market fintech. Last month she got a 48-hour deadline from a European banking customer: produce a complete AI Bill of Materials for every model, dataset, and…

  • Every CISO should have an AIBOM in 2026 for AI system security and compliance.
  • Most vendors provide incomplete AIBOMs, treating it like a filing cabinet.
  • An AIBOM is a real-time, continuously-updated graph for AI system behavior and provenance.

More from Thursday 15 October →