ISR News: Microsoft Patch Tuesday
Excerpts From Cnet.com
Microsoft said Thursday it will release three security updates on this coming Patch Tuesday, including one that is rated “critical” and could allow an attacker to take over the computer. The critical update affects Windows 2000, XP, Vista and Server 2003 and 2008, the company said in an advisory.
The other two updates are rated “important” and could be used for spoofing, in which an attacker is able to masquerade as someone else. One of the patches affects all supported versions of Windows and the second affects Windows 2000, Server 2003, and Server 2008.
Missing from the security updates is a fix for a security vulnerability in Excel, for which there have been Zero-Day exploits.
Comment By Kevin M. Nixon, Information-Security-Resources.com Security Editor:
Readers should note that Information-Security-Resources.com staff has been working in coordination with both Microsoft & US-CERT to raise the awareness of this new vulnerability risk. US-Cert reviewed our data and has issued the following HIGH Impact Security
http://www.us-cert.gov/current/index.html#microsoft_releases_advanced_notification_for4
http://www.us-cert.gov/current/index.html#malicious_code_targeting_social_networking
Kevin has testified as an expert witness before the Congressional High Tech Task Force, the Chairman of the Senate Armed Services Committee, and the Chairman of the House Ways and Means Committee. He has also served on infrastructure security boards and committees including the Disaster Recovery Workgroup for the Office of Homeland Security, and as a consultant to the Federal Trade Commission.
Filed under: ISR News, hackers, identity-theft, malware, privacy
Comments
Tell me what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!
