When you find yourself facing an unpatched vulnerability, patience is the key, Reguly advises CSOs. “Thankfully, Microsoft did not list these as already exploited, and, hopefully the patches will be released shortly. As a CSO, this is where you want to know that you’ve got a robust, layered approach to enterprise security. The real risk isn’t introduced until an exploit exists, and right now it is a race between Microsoft and the malicious actors. We don’t know who will win that race, so we rely on building our security stack from top to bottom and expect that our tool set will do the job if needed.”
CISOs should also note that Microsoft warned that distribution of the Windows 11, version 24H2 update released on Tuesday will be slowed.
“We’ve identified a compatibility issue affecting a limited set of these devices,” Microsoft said. “If your device is affected, you’ll receive a revised update with all the June 2025 security improvements by the end of the day. The June 2025 security update is fully available for all other supported versions of Windows.”