Sep
05
Upcoming Microsoft patch lineup could be 'massive'
Microsoft today said it will ship four security updates next week, only a third as many as it did last month, to fix critical vulnerabilities in Windows, Office, Windows Media Player and other parts of its software portfolio.
But just because September sports only four -- down from almost a dozen in August -- that doesn't necessarily mean patching will be a breeze, said Andrew Storms, director of security operations at nCircle Network Security.
"It's not going to be an easy month," Storms said, "what with all these different applications and different operating systems affected. Patching will be a lot more involved than you'd think with just four bulletins."
Storms called the patching job "potentially massive."
In the advance notification Microsoft published Thursday, it tagged all four of the expected updates as "critical" -- its highest threat rating. As customary, Microsoft limited the information to naming the affected software and providing only generalities about the bugs. However, all four will patch one or more "remote execution" vulnerabilities, flaws that allow attackers to gain control of a system by introducing malicious code, often by convincing users to open a file attachment or tricking them into visiting a rogue Web site.
Read more @ Computer World
Subscribe to:
Post Comments (Atom)
Posts
Post a Comment