December 2024 Security Patch Roundup: Critical Updates for Your Digital Estate

fahd.zafar • December 12, 2024

At Altiatech, we're committed to helping organisations secure their digital future. Our latest security advisory highlights critical patches and updates that require your immediate attention.

Microsoft's December Patch Tuesday

As a Microsoft Partner, we're closely monitoring Microsoft's latest security releases. This month brings 71 vulnerabilities, with 16 rated as Critical. Of particular concern is a zero-day vulnerability (CVE-2024-49138) in the Windows Common Log File System Driver that requires immediate attention.

Remote Desktop Services users should take particular note, with eleven new vulnerabilities patched - nine Critical and two Important. For organisations using Microsoft Entra (formerly Azure AD), we recommend reviewing these updates as part of your identity and access management strategy.

Adobe's Significant Update

Adobe has released updates for 16 applications, addressing 165 vulnerabilities. As part of our Modern Workspace solutions, we recommend prioritising these updates, particularly for creative teams using Adobe Creative Cloud applications.

Critical Updates from Key Security Vendors

Our strategic partnerships with leading security vendors allow us to provide comprehensive guidance on:

  • Palo Alto Networks' critical authentication bypass vulnerability (CVE-2024-0012)
  • Fortinet's eight new security patches
  • Cisco's December advisories
  • SAP's security notes affecting NetWeaver components

Industrial Control Systems Advisory

For our manufacturing and industrial sector clients, we're monitoring seven new security advisories affecting various ICS products. Our team can help assess your exposure and implement necessary updates.

Recommended Actions

Our security experts recommend:

  1. Immediate patching of actively exploited vulnerabilities
  2. Scheduled updates for Remote Desktop Services
  3. Comprehensive review of Adobe products in your environment
  4. Assessment of industrial control systems where applicable

How Altiatech Can Help

With our expertise in identity management through altIAM and our comprehensive cybersecurity services, we can help you:

  • Assess your current security posture
  • Implement critical patches
  • Manage your identity and access controls
  • Ensure compliance with security best practices

Take Action Now

Don't let your organisation's security be compromised. Our team of experts is ready to help secure your digital estate.

Contact Us


Trust Altiatech to keep your systems secure and compliant.

M&S Cyber Incident: A Wake-Up Call for British Businesses

April 28, 2025
The Impact of a Major Retail Security Breach The recent cyber incident at Marks & Spencer has sent shockwaves through the British retail sector.

Beyond Mail Check: Securing UK Public Sector Email After the NCSC Changes

By Sean Bird • March 10, 2025
In a significant development for email security protocols in the UK, the National Cyber Security Centre (NCSC) announced forthcoming changes to its Mail Check service.

Trust in the Age of AI: A Practical Guide to the New UK Security Standards

By fahd.zafar • February 12, 2025
With the UK government's announcement of world-first AI cyber security standards, organisations need a clear roadmap for implementation. At Altiatech, we're already helping businesses adapt their security frameworks to meet these new requirements while maintaining operational efficiency.

The End of Microsoft 365's VPN: What It Means for Your Business Security

By fahd.zafar • February 5, 2025
With Microsoft's recent announcement of the removal of their VPN feature from Microsoft 365 subscriptions, organisations need to reassess their security strategy. At AltiaCyber, we're helping businesses turn this change into an opportunity to strengthen their overall security posture.

Urgent Call for Enhanced Cyber Resilience as UK Government Faces Severe Security Challenges

By fahd.zafar • January 30, 2025
In a sobering report released by the National Audit Office (NAO), the UK government's cyber security posture has been revealed to have significant vulnerabilities, with the threat landscape advancing at an alarming pace. The findings highlight critical gaps in cyber resilience across multiple government departments, raising serious concerns about the protection of vital public services.

UK's Cyber Risk "Widely Underestimated": Why Your Organisation Needs to Act Now

By fahd.zafar • December 6, 2024
The head of GCHQ's National Cyber Security Centre (NCSC), Richard Horne, has issued a stark warning about the UK's cybersecurity landscape. In his first major speech, he highlighted a "clearly widening gap between the exposure and threat we face, and the defences that are in place to protect us."

10 Essential Cybersecurity Tips for Businesses

By fahd.zafar • August 29, 2024
In today's digital landscape, cybersecurity is not just an IT issue—it's a business imperative. As cyber threats continue to evolve and become more sophisticated, organisations of all sizes must stay vigilant and proactive in protecting their digital assets. At Altiatech, we're committed to helping businesses strengthen their cybersecurity posture. Here are ten essential tips to help safeguard your organisation in 2024 and beyond.

Identity Access Management: Letting the Right One In

By monsur.ali • August 29, 2024
As businesses expand their digital presence and embrace hybrid work models, the need for robust Identity Access Management (IAM) solutions has become paramount. At Altiatech, we understand the complexities of IAM and offer tailored solutions to ensure you're always "letting the right one in."
More Posts