Microsoft to Patch 13 Security Holes in Windows, Office

Microsoft’s September batch of security patches will include fixes for 13 documented vulnerabilities affecting Windows, Internet Information Services IIS, and Microsoft Office. According to the company’s advance notification for this month’s Patch Tuesday, there will be a total of 9 bulletins fou...

Microsoft Windows SRV.SYS SrvSmbQueryFsInformation Pool Overflow DoS

This module exploits a denial of service flaw in the Microsoft Windows SMB service on versions of Windows prior to the August 2010 Patch Tuesday. To trigger this bug, you must be able to access a share with at least read privileges. That generally means you will need authentication. However, if a...

Inside Microsoft's August Patch Tuesday

Microsoft has released their planned 14 bulletins fixing 34 vulnerabilities today. There are four bulletins that administrators should look at patching as soon as possible. MS10-052 and MS10-055 both affect media files and are rated as Critical. Opening a malicious media file can lead to remote...

MS Patch Tuesday: Critical IE, Office Patches Coming

Microsoft is planning a very busy Patch Tuesday this month: 14 bulletins with patches for 34 vulnerabilities in Windows, Microsoft Office, Internet Explorer, SQL and Silverlight. According to Microsoft’s advance notice for the August batch of patches, eight of the bulletins carry a “critical”...

Microsoft Releases FixIt Tool for LNK Flaw

Microsoft has released a FixIt tool for the unpatched LNK Windows shell vulnerability and also has updated its guidance on how to deal with the flaw. The company also said it is continuing to work on developing a patch for the vulnerability. The FixIt tool that Microsoft published Tuesday mitigat...

Microsoft: 25,000 Computers Attacked With Latest Windows Zero Day

The Windows Help and Support Center vulnerability that was patched with yesterday’s MS10-042 bulletin was under active attack by malware miscreants, especially in Europe where Microsoft tracked about 25,000 attempts to exploit the vulnerability. According to Microsoft’s Holly Stewart, the attacks...

Patch Tuesday: Microsoft Kills Pwn2Own Browser Bug

The Microsoft Patch Tuesday train rolled into town today, dropping off a massive 10 security bulletins with fixes for at least 34 documented vulnerabilities. Three of the bulletins are rated “critical” because of the risk of remote code execution attacks. Affected products include the Windows...

MS Patch Tuesday Heads-up: 10 Bulletins, 34 Vulnerabilities

Microsoft’s Patch Tuesday this month will be a big one: 10 bulletins fixing 34 vulnerabilities in Windows, Office and Internet Explorer. Three of the 10 bulletins will be rated “critical,” Microsoft’s highest severity rating. The flaws addressed in those bulletins typically expose users to remote...

Adobe Releases Quarterly Patches, Enables Auto Updater

Adobe on Tuesday released its quarterly load of patches, including an update for Adobe Reader that fixes several critical vulnerabilities. The company also used the opportunity to enable the new automatic updater in both Reader and Acrobat. The vulnerabilities in Reader could give an attacker the...

On the Latest iPhone Attack, Patch Tuesday and More Fallout from Google

Dennis Fisher and Ryan Naraine discuss the latest iPhone attack, the upcoming Patch Tuesday and the never-ending fallout from the Google attack. SHOW NOTES iPhones Vulnerable to New Remote Attack Microsoft to Patch 26 Windows, Office Vulnerabilities Google Attack Was Tip of the Iceberg Subscribe ...

Microsoft Plans Quiet January Patch Tuesday

Microsoft’s first Patch Tuesday for 2010 will be very light: A solitary bulletin addressing a vulnerability that is rated critical only for Windows 2000 users. According to Redmond’s advance notice for the next batch of patches due on January 12, the bulletin is rated “low” for every other affect...

MS to Patch Critical IE Zero-Day Flaw

Just two weeks after the release of exploit code for a critical remotely exploitable security hole in its Internet Explorer browser, Microsoft says a fix will be included in this month’s batch of Patch Tuesday updates. Microsoft has already issued an advisory to confirm the severity of the issue,...

Critical Windows Kernel Flaw Highlights Patch Tuesday

Guest editorial by Jason Miller Microsoft has released six new security bulletins in November’s Patch Tuesday. Administrators are getting a bit of a break after last month’s mammoth security bulletin release. MS09-065 is the first bulletin administrators should address. This bulletin affects the...

Microsoft: Pay Special Attention to MS09-065 Patch

As part of its scheduled batch of patches for November, Microsoft today issued six security bulletins with fixes for a total of 15 vulnerabilities affecting its Windows and Office product lines. Three of the six bulletins are rated “critical,” meaning they can be used to launch remote code...

October Microsoft Patch Tuesday Has Something for Everyone

By Jason Miller Microsoft has released 13 new security bulletins in the October 2009 version of Patch Tuesday. Eight bulletins have a severity rating of Critical. The remaining five security bulletins have a severity rating of Important. For the first time, Windows 7 and Windows 2008 R2 are...

Microsoft Ships Largest Batch of Security Patches

Microsoft today released its largest ever batch of Patch Tuesday updates to fix a whopping 34 security holes in a wide range of widely deployed software products. The latest patch batch covers critical vulnerabilities in software products that are bundled with Microsoft’s dominant Windows operati...

Patch Tuesday Heads-Up: 13 Bulletins, 8 Critical

Microsoft is planning a bumper Patch Tuesday next week — 13 bulletins covering 34 security vulnerabilities in a wide range of products. Eight of the 13 bulletins will be rated “critical,” Microsoft’s highest severity rating. According to Microsoft’s advance notice, the patches coming on October 1...

Patch Tuesday: Microsoft Plugs Windows Worm Holes

Microsoft today released a peck of patches to cover at least seven documented worm holes in the Windows operating system. The most serious of the vulnerabilities addresses could lead to remote code execution complete system takeover attacks. The September batch of patches does not address the FTP...

Inside Microsoft Patch Tuesday: Revenge of the ActiveX Controls

Microsoft has released nine bulletins today, five of them Critical, four of them Important. The bulletins cover a gamut of affected products – almost everything in your enterprise will need to be patched today with the exception of Internet Explorer. No IE patches this month! The majority of...

On the Twitter DDoS Attacks, Apple and Microsoft Patches

Threatpost editors Ryan Naraine and Dennis Fisher discuss the DDoS attacks against Twitter, Facebook and LiveJournal and delve into Apple’s Mac OS X patch and Microsoft’s Patch Tuesday plans. SHOW NOTES: UPDATE: Twitter Suffers DoS Attack Apple Warns of Mac Attack Risk via Image Files Microsoft...