Saturday, September 09, 2006

It's "Microsoft Tuesday" next week

Microsoft Security Bulletin Advance Notification

On 12 September 2006 Microsoft is planning to release Security Updates. Two of the updates address security flaws in Windows, the highest severity rating for these is important. The third patch deals with Office, the highest severity rating for these is Critical.

Microsoft also advised that it expects to issue several non-security "high-priority" updates, but it did not supply any information on what those updates might be. Microsoft will host a webcast next week to address customer questions on these bulletins. For more information on this webcast or the security updates please see below:

View the details HERE.

==================================================================
How fast does Windows Update update?

Readers have asked me, "How quickly is my computer protected after Patch Tuesday, if I have auto-updates turned on?"

The question arises because most of the patches that Microsoft posted on Aug. 8 took a lot longer than usual to download. It appears that Windows Update, when configured to download and install patches automatically, didn't start downloading most patches until three days after Patch Tuesday. Some PCs didn't auto-install all of the security patches until nine days had passed.

Read the article HERE.

==================================================================
Third-party patching: Prudent or perilous?

Third-party patching, a hot topic in recent months given the increased prevalence of zero-day flaws, was among the issues dissected at the recent Black Hat USA 2006 conference in Las Vegas.

In one presentation, Alexander Sotirov, a reverse engineer on the security research team at Redwood City, Calif.-based vulnerability protection firm Determina Inc., said third-party patching provides another security option for IT shops that need to block exploits before an official patch is developed, and that those patches are easy to uninstall after an official patch is released.

Read the article HERE.

0 Comments:

Post a Comment

<< Home