Patch Tuesday Roundup
Every month, within a few days of Microsoft’s Patch Tuesday (the second Tuesday), a plain-English rundown of what to fix first — Microsoft, Adobe, major browsers and high-impact third-party patches, prioritized with CISA KEV and exploit data.
Archive · newest first
Attackers are already stealing AI API keys three ways: breaking into exposed AI gateways like LiteLLM, tricking agents into handing keys over via prompt injection, and scooping up keys AI coding tools leave behind in config files. Here’s what to lock down this week.
AZ-104 and SAA-C03 sit at the same level, but one is an admin exam and the other is an architect exam. Here’s what each one actually tests, side by side, and how to pick your first cloud cert.
Windows Server 2016 reaches end of extended support on January 12, 2027. Here is what ends, why waiting until next summer is too late, and how Azure can buy you up to three more years of security updates.
Microsoft’s June extension of free Windows 10 updates covers consumer PCs only. Business-managed devices are on the paid ESU program, Year 2 costs twice as much, and it comes due in October.
Microsoft’s September 2026 Patch Tuesday fixed 966 CVEs, including two zero-days already exploited in the wild, and an out-of-band update followed three days later. Here’s what to fix first.