topics that matter; ideas worth sharing

share a tip, submit a link, add something new

April to be another big Microsoft security patch month

April 3, 2008, 02:33 PM —  IDG News Service — 

Microsoft plans to release eight security updates next Tuesday, five of which
are rated critical by the software vendor.

The critical patches affect Windows, the VBScript programming software, Microsoft
Project and Internet Explorer, which will get two updates. They will be released
as part of the company's monthly software update cycle, which mandates security
updates on the second Tuesday of each month.

The updates were described in general terms in
a note posted Thursday
to Microsoft's Web site. More details will be released
Tuesday, when the patches are made available.

Two less-critical updates -- rated important by Microsoft -- are planned for
Windows. A third important update is being readied for the Visio design software,
the company said.

The critical Windows update -- called Bulletin 2 by Microsoft -- looks particularly
important because it affects all supported versions of Windows, said Andrew
Storms, director of security operations with nCircle Network Security. "This
really bucks the trend for Microsoft recently. Their trend is the newer operating
systems have lower criticality," he said. "It's got to be something
core to the operating system in order for it to be critical all the way across
the board."

The VBScript update is probably the same one that Microsoft ended up pulling
at the last minute in March, he said.

With two more updates this month, Office has been keeping Microsoft's Security
Response Center busy.

Last month the company patched a total of 12 bugs in four security updates.
All of them were for Office products.

IDG News Service

I like it!
Post a comment
The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.
Resources
White Paper

Symantec Backup Exec 12 and Backup Exec System Recovery 8 deliver industry leading Windows data protection and system recovery. Download this whitepaper to find out the top reasons to upgrade and how to get continuous data protection and complete system recovery.

Webcast

Data and system loss — from a hard drive failure, malicious attack, natural disaster, or simple human error — can happen anytime. Don’t leave your business vulnerable. Make sure you have a secure recovery strategy in place. Symantec's latest backup and system recovery technology can efficiently restore critical applications, individual emails and documents and even restore your entire system in minutes in the event of a loss.

White Paper

Businesses face a growing challenge to ensure that the IT environment is properly protected. Backup Exec 12 integrates with other applications in the Symantec family of products, to complement your current data protection strategy, keep your data securely backed up and make it recoverable when you need it most.

Free stuff
Featured Sponsor

Get a broad understanding of important regulations and how you can make sure your site is in adherence.





Learn how VeriSign SGC-enabled SSL Certificates can help improve site security and customer confidence in the free white paper, "How to Offer the Strongest SSL Encryption." In this paper you will learn the differences between weak and strong encryption and what they mean for your site's performance.

Get VeriSign's free white paper: "The Latest Advancements in SSL Technology" and learn about the benefits of strong SSL encryption, Extended Validation (EV) SSL and security trust marks and what these SSL offerings can do for your site.

Now with Extended Validation (EV) SSL available from VeriSign, you can show your customers that they can trust your site. Learn about EV SSL benefits in this free VeriSign white paper.

More Resources