Microsoft Patch Tuesday for January 2025 — Snort rules and prominent vulnerabilities

Microsoft's January 2025 Patch Tuesday addresses 159 vulnerabilities (12 critical), including several high-severity remote code execution and privilege escalation flaws affecting Remote Desktop Services, OLE/Outlook preview, BranchCache, NTLMv1, Excel, and other components; Microsoft published mitigations for some issues and flagged several as "more likely to be exploited." Cisco Talos released Snort and Snort3 rules to detect exploitation attempts for many of these CVEs and advises customers to update detection signatures and apply Microsoft patches and mitigations (for example, disabling RTF or NTLMv1 where recommended).