May 2025 Patch Tuesday Insights for Intune & Windows Admins

Описание: Key Focus Areas This Month:
Windows 11 Updates: We scrutinize critical updates for Windows 11, including KB5058405 (for versions 22H2 and 23H2, addressing 35 CVEs) and KB5058411 (for version 24H2, tackling 36 CVEs). Learn about vital Servicing Stack Updates (SSUs) like KB5058528 and KB5058523, crucial for reliable patching. We also touch on improvements to Secure Boot (SBAT), Linux EFI detection, and AI components.

Intune Patching Strategies: Discover modern patching principles for Microsoft Intune environments. We discuss managing SSUs, the role of Dynamic Updates (like KB5059442, KB5059607, KB5059806) for smoother upgrades, and hotpatching considerations (e.g., KB5061096 for Windows PowerShell on LTSC 2024). Learn why ring-based deployments via Intune are highly recommended for these updates.

Multi-OS & Critical Fixes: Get insights into updates spanning multiple Windows versions, including Windows 10. Notable KBs include KB5058379 for Windows 10 LTSC 2021/22H2 (20 CVEs, critical SBAT fix) and KB5058392 for Windows 10 LTSC 2019/Server 2019 (mitigating BYOVD attacks).

CVE Prioritization & End of Support: While no CVEs were immediately rated "Critical" in the KB summaries, the 81 "High" severity CVEs demand attention. We also remind you about the upcoming Windows 10 end-of-support in October 2025.
Why watch this video?

Expert Analysis: Get a concise breakdown of essential KBs for May 2025.
Actionable Advice: Understand how these updates impact your Intune and Windows environments.

Time-Saving Recap: We distill complex information into what you need to know for effective patching.

00:00:00 - 00:00:43: Introduction & Overview
Welcome and topic: May 13th, 2025 Patch Tuesday report.
Goal: Practical insights for Intune admins, covering 13 updates and 145 CVEs.
00:00:43 - 00:03:17: Windows 11 Security Updates (Recent Versions)
Discussion of critical security updates for Windows 11 (22H2, 23H2, and 24H2).
Key fixes, Servicing Stack Updates (SSUs), and improvements (Secure Boot, Linux EFI, AI components).
No known issues reported for these updates.
00:03:17 - 00:04:14: Windows 11 LTSC Hot Patch Update
Security update for Windows 11 Enterprise LTSC 2024 (Hot Patch Program).
Focus on critical PowerShell vulnerabilities.
00:04:14 - 00:06:06: Windows 10 Security Updates (LTSC 2021 & 22H2)
Critical security updates for various Windows 10 versions.
Emphasis on Secure Boot (SBAT) and Linux EFI detection.
Known issue with Citrix components and prerequisites for deployment.
00:06:06 - 00:07:27: Older Windows 10 & Server 2016 Security Updates
Updates for Windows 10 (version 1607, RTM build) and Windows Server 2016.
Continued focus on Secure Boot and Linux EFI, with SSU prerequisites.
00:07:27 - 00:09:15: Windows 10 LTSC 2019 & Server 2019 Security Update
Critical security update for LTSC/Server editions.
Addresses Windows Kernel vulnerability via driver blocklist.
Includes graphics fixes, SBAT improvements, SSU, and the Citrix known issue.
00:09:15 - 00:10:13: Non-Security: Servicing Stack Updates (SSUs)
SSUs for older Windows 10 versions (1607, 1507) and Server 2016.
Focus on improving update mechanism robustness.
00:10:13 - 00:12:08: Non-Security: Safe OS Dynamic Updates (WinRE)
Updates for Windows Recovery Environment (WinRE) for Windows 11 (24H2), Server 2025, and Windows 10 (21H2, 22H2).
Enhancements for code integrity, reliability, and verification methods.
Known issue regarding event log visibility for one update.
00:12:08 - 00:13:11: Non-Security: Setup Update (Win11 24H2 & Server 2025)
Critical update enhancing feature update process for newer Windows versions.
No restart required, uninstallable.
00:13:11 - 00:14:30: Summary & Key Takeaways
Recap of critical security updates and the recurring theme of Secure Boot (SBAT) & Linux EFI enhancements.
Importance of SSUs, Safe OS updates for WinRE, and the feature update process improvements.
Reminder of the Citrix known issue.
Overall substantial Patch Tuesday impacting security, boot integrity, and update reliability.
00:14:30 - 00:14:59: Final Thoughts & Call to Action
Discussion point for listeners: Effective strategies for managing update complexity and frequency.
The ongoing challenge of balancing speed and safety in patching.

Dive Deeper:
Explore the blog: PortalFuse Weekly KB Update Report - May 13, 2025 (Patch Tuesday) | Blog | PortalFuse
Read the full report: PortalFuse Weekly KB Update Report - 2025-05-13 23:59:59.254000+00:00
Join the conversation in our community forum: https://portalfuse.nodebb.com

Subscribe for more expert insights on Intune, Windows administration, and cybersecurity!
#PatchTuesday #Intune #Windows11 #WindowsUpdate #Cybersecurity #Microsoft #WindowsAdmin #ITPro #PortalFuse