patch

Mon
07
Jan
Dennis Faas's picture

Microsoft Patch Tuesday: IE Security Fix Not Ready

Microsoft's January 8, 2013 Patch Tuesday includes a total of seven patches, two of which Microsoft is labeling 'critical,' the firm's highest security rating. Notably absent from the lineup of fixes will be a patch for a recently-outed Internet ... Explorer security flaw. This Patch Tuesday's critical fixes address security vulnerabilities that, like so many other previously patched vulnerabilities, could potentially allow a hacker to remotely execute malicious files and take control of an unpatched computer. As usual, hackers could do this by convincing a computer user to visit a malicious ... (view more)

Wed
14
Dec
Dennis Faas's picture

December Patch Tuesday Fixes Duqu Worm

Microsoft has fixed a major vulnerability exploited by the nasty Duqu Worm with its most recent Patch Tuesday series of security updates, which started rolling out yesterday. The total number of patches fix 17 vulnerabilities in Windows. (Source: ... eweek.com ) Unfortunately, the company still hasn't issued a fix for a serious browser flaw ominously known as BEAST (Browser Exploit Against SSL/TLS). The BEAST exploit was first discovered in September of this year and was responsible for cracking Paypal encrypted browser cookies. (Source: theregister.co.uk ) Of the 17 vulnerabilities noted, ... (view more)

Wed
11
May
Dennis Faas's picture

Microsoft Patch Tuesday Fixes Windows, PowerPoint

Microsoft unveiled a modest Patch Tuesday collection of fixes for its software products this month. However, at least a few of the patches address security holes that experts say could be easily exploited. On Tuesday, Microsoft's series of May ... patches addressed just three bugs, only one of which is marked "critical," the company's highest security rating. The most serious patch is labeled MS11-035 and is intended to fix a vulnerability in the Windows Internet Name Service (WINS), a component in every edition of Windows Server. Critical Update Not Automatically Deployed The way in which ... (view more)

Wed
09
Mar
Dennis Faas's picture

Microsoft Fat Tuesday Patch Rather Slim

In a break from the ordinary, this month's Microsoft Patch Tuesday features relatively few fixes for the software giant's many products. There are just three security bulletins for the month of March, covering about four distinct security flaws in ... various software. The lull is somewhat unexpected after several months of record-breaking patch releases by Microsoft. By comparison, February had a total of twelve security bulletins , three of which were marked "critical", the company's highest threat warning. One 'Critical' Security Bulletin Issued for March This month, just one of the three ... (view more)

Wed
15
Sep
Dennis Faas's picture

Latest MS Patch Fixes Stuxnet Worm; 2 Exploits Remain

As announced late last week , Microsoft has released a patch addressing thirteen vulnerabilities in its Windows operating systems (OS) and business suite Office. The most critical of these threats are posed by the Stuxnet worm, of which 2 zero-day ... flaws remain at large and unpatched. (Source: eweek.com ) Stuxnet Worm: Sophisticated, Huge Threat Security experts say the patch is an important one. For users of the ubiquitous Windows XP, the exploit has been ranked "critical" by Microsoft, its most serious rating. However, if you're running the more recent Vista or Windows 7, the Stuxnet threat ... (view more)

Thu
19
Aug
Dennis Faas's picture

Adobe Emergency Patch to be Released Later Today

Adobe will today release a patch for a critical security vulnerability in its popular Reader and Acrobat software. The issue was first identified at the Black Hat security conference in July, and has since remained without a fix. Adobe noted in ... early August that the patch would be available this week, well ahead of its next scheduled security release (based on a quarterly timetable) in mid-October. Reader, Acrobat for Windows and Mac Affected According to an advisory from Adobe, the patch is meant to fix a number of critical issues affecting Reader 9.3.3 for Windows, Unix and Mac as well as ... (view more)

Fri
13
Aug
Dennis Faas's picture

Microsoft Says Latest Bugs Genuine, But No Need To Panic

Microsoft has confirmed it's investigating yet another large-scale bug affecting all supported editions of Windows. At the same time, it's ruled out issuing an emergency patch for the kernel-related issue that emerged just last week. On Tuesday, ... Microsoft issued a record-breaking monthly Patch Tuesday update containing a record 14 security bulletins. When that was announced, it looked as if it would be network administrators who'd be in for a particularly busy time, while Microsoft security staff could at least have some breathing room. That turned out not to be the case. Bogus Color Data ... (view more)

Mon
09
Aug
Dennis Faas's picture

'Million Dollar Flaw' the First Test of XP Phaseout, say Critics

Microsoft has faced the first major test of its policy to phase out support for some versions of Windows XP. A major security patch last week was only available to users who had upgraded to the third and final Service Pack (SP3). As previously ... reported, Microsoft issued an out-of-cycle update (known more casually as an emergency pack) to patch a Windows shortcut flaw. The issue was particularly serious because it meant machines could be hacked if a user opened a folder containing the infected shortcut file, even if they didn't click on the shortcut itself. The shortcut flaw was such a clear ... (view more)

Thu
22
Jul
Dennis Faas's picture

Microsoft Issues Temporary Fix for Shortcut Flaw

Microsoft has issued an automated workaround for a Windows shortcut flaw that security researchers yesterday flagged with a yellow alert. The workaround is a temporary measure while the company works furiously to provide a more permanent patch. The ... Windows shortcut flaw affects files with the .LNK extension (otherwise known as "shortcut files"). The zero-day vulnerability could allow cyber criminals to seize control of victim PCs. A similar and more public version of the exploit affected Siemens industrial automated systems just last week. Temporary Fix Alters Icons, Leaving them ... (view more)

Fri
07
May
Dennis Faas's picture

MS Readies Light Patch Tuesday, but Omission Raises Eyebrows

Just five weeks after it was forced to release an emergency patch for a zero-day flaw in Internet Explorer (IE), Microsoft may again have to consider yet another out-of-schedule fix for an unaddressed problem with its software. In the meantime, the ... upcoming May Patch Tuesday (due next week) addresses just two "critical" issues. Microsoft typically releases a batch of fixes for various software issues and security threats affecting its products on the second Tuesday of every month. In past months, the number of fixes offered have ranged from high to low: in March, the number of vulnerabilities ... (view more)

Pages

Subscribe to RSS - patch