Microsoft Drops Another Massive Patch Update

Microsoft's April 2025 Patch Tuesday addresses 126 vulnerabilities, including a kernel-level CLFS zero-day (CVE-2025-29824) that is being actively exploited by Storm-2460 to elevate privileges and deploy ransomware across multiple sectors; the release also fixes numerous elevation-of-privilege and remote code execution flaws (notably LDAP RCEs and Office issues), and security vendors recommend urgent patching, especially where Windows 10 updates are delayed.