Microsoft Tweaks Simplified Servicing Packages for Older Versions of Windows

Microsoft has made a change to the new streamlined update process for older versions of Windows.

read more Continue reading Microsoft Tweaks Simplified Servicing Packages for Older Versions of Windows

March Patch Tuesday closes record number of vulnerabilities

With no February Patch Tuesday, it was to be expected that Microsoft would fix a huge number of security issues in March. They didn’t disappoint: 139 unique CVEs have been resolved. As announced before, the information was released through the company’s Security Update Guide, but they’ve also decided to publish security bulletins (a total of 18) this month, “to give customers extra time to ensure they are ready to transition their processes.” The March security … More Continue reading March Patch Tuesday closes record number of vulnerabilities

By the end of March no one will remember that Microsoft missed a Patch Tuesday

Like the weather in Minnesota, the March Patch Forecast is unpredictable at best. Be prepared for turbulent times interspersed with moments of calm. Will March Patch Tuesday go off without a hitch? What really happened last month? I had a number of people ask that question in the past month. There was a lot of speculation that there was a critical bug in a fix in the rollup. If that was the case, why did … More Continue reading By the end of March no one will remember that Microsoft missed a Patch Tuesday

Google publishes remote code vulnerability in Microsoft browsers

Google’s Project Zero published an unpatched and very severe vulnerability in the Microsoft Edge and Internet Explorer version 11 browsers Monday, after a 90-day deadline expired without a fix from Microsoft’s engineers. The publication, which means hackers will be able to write exploits for the affected software, appears to be the latest result of Microsoft’s shocking and still mysterious decision […]

The post Google publishes remote code vulnerability in Microsoft browsers appeared first on Cyberscoop.

Continue reading Google publishes remote code vulnerability in Microsoft browsers

Google releases details, PoC exploit code for IE, Edge flaw

As we’re impatiently waiting for Microsoft to patch vulnerabilities that were scheduled to be fixed in February, Google has released details about a serious vulnerability in the Internet Explorer and Edge browsers. What’s more, the report also contains POC code that, if implemented in web pages, should crash vulnerable browsers. Savvy attackers could perhaps use it as a first step of an attack that could ultimately result in remote code execution. But Google Project Zero … More Continue reading Google releases details, PoC exploit code for IE, Edge flaw