TLDR InfoSec · QUICK LINKS
MICROSOFT: PATCH FOR WSUS FLAW DISABLED WINDOWS SERVER HOTPATCHING
Summary from the TLDR InfoSec newsletter
Microsoft's emergency patch, KB5070881, for the actively exploited CVE-2025-59287 WSUS remote code execution vulnerability inadvertently disabled hotpatching on Windows Server 2025 systems, forcing affected organizations to choose between vulnerability remediation and zero-downtime patching capabilities until the corrected KB5070893 update or the January 2026 baseline becomes available.