In October, Microsoft ended support for Windows Server 2012, and last year it did so for SQL Server 2012. This has left organizations vulnerable to cyberattacks, as they scramble to upgrade their ...

While not listed as critical, CVE-2025-49719 is a publicly disclosed information disclosure vulnerability, with all versions as far back as SQL Server 2016 receiving patches.

A group of financially motivated Turkish hackers targets Microsoft SQL (MSSQL) servers worldwide to encrypt the victims' files with Mimic (N3ww4v3) ransomware.

Microsoft has released the June 2025 security baseline update for Windows Server 2025 to help admins use the best configurations for their systems.