Newsletters
Technology, Discovery & Innovation NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
This ad will display for the next 20 seconds. Click for more information, or
Home Computing Digital Life Discovery Space More Topics...
Windows Security
Average Rating:
Rate this article:  
Light Patch Tuesday, But New Security Advisories Emerge
Light Patch Tuesday, But New Security Advisories Emerge

By Jennifer LeClaire
October 10, 2012 10:05AM

Bookmark and Share
Besides the seven bulletins, Microsoft is publishing several security advisories. In October, KB2661254 is being switched to automatic download and will start enforcing a minimum of 1024-bit key length for certificates. Key lengths of under 1024 bits are forge-able and certificate authorities have stopped producing such certificates.
 



Microsoft on Tuesday issued seven bulletins to patch 20 vulnerabilities. Only one patch is critical. The rest are important. But despite the light cycle, IT admins can expect more Microsoft-related work in October.

Andrew Storms, director of security operations for nCircle, said Microsoft is re-releasing a number of patches this month -- in addition to the seven bulletins released as part of the regular patch Tuesday schedule and Monday's Adobe Flash update distributed to Windows 8 users via Windows Update.

Patch Re-Release

"These patches were released earlier this year and have to be re-released due to clerical error with the code signing process at release time. We're also seeing a re-release of an XML Core Services for Windows 8 users, a preventative measure to protect users against potential malicious use of MSXML," Storms told us.

As Storms sees it, the good news is that IT admins don't have to patch Internet Explorer this month since routine fixes were bundled into last month's out-of-band update and, with one exception, the other fixes are fairly tame.

"The RTF bug in Microsoft Word warrants special attention since users can be exploited simply by previewing a malicious RTF file in Outlook," Storms said. "Security teams should prioritize, distribute and install this fix as soon as possible."

Patch this First

We also asked Wolfgang Kandek, CTO of Qualys, for his insights into Microsoft's monthly release. He told us the "critical" bulletin fixes two vulnerabilities in Microsoft Word and applies to all versions of Microsoft Office.

"It addresses a vulnerability that can be exploited via a malicious RTF formatted e-mail through the Outlook Preview pane without having to open the e-mail," Kandek said. "Since the development complexity of an attack against this vulnerability is low, we believe this vulnerability will be the first to have an exploit developed and recommend applying the MS12-064 update as quickly as possible."

New Security Advisories

Besides the seven bulletins, Microsoft is publishing several security advisories. In October, KB2661254 is being switched to automatic download and will start enforcing a minimum of 1024-bit key length for certificates. Key lengths of under 1024 bits are forge-able and certificate authorities have stopped producing such certificates for several years now, he said.

"KB2749655 is a new advisory and explains a problem in Microsoft's code-signing infrastructure. During the three months in the summer of 2012, a number of binary files in Microsoft Security Bulletins were signed in a flawed way that will lead to their loss of validity, causing them to stop working in January 2013," Kandek said.

"To solve the problem, Microsoft will publish new versions of the affected bulletins, and organizations will need to reinstall the affected updates. This month the updated packages are MS12-053, MS12-054, MS12-055 and MS12-058."
 

Tell Us What You Think
Comment:

Name:

Jamos:

Posted: 2012-10-11 @ 7:22am PT
This patch breaks ICS.





 Windows Security
1.   Barracuda Secures Microsoft Azure
2.   Windows 7 Ends Mainstream Support
3.   Cybercrime Ring Uncovered in Brazil
4.   Fix on Way for Win 8.1 Upgrade Woes
5.   Android, Win Phone To Get Kill Switch


advertisement
Windows 7 Ends Mainstream Support
But extended support still available.
Average Rating:
Barracuda Secures Microsoft Azure
With updated Web Application Firewall.
Average Rating:
Cybercrime Ring Uncovered in Brazil
Malware hit the boleto payment system.
Average Rating:
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Researchers Working To Fix Tor Security Exploit
Developers for the Tor privacy browser are scrambling to fix a bug revealed Monday that researchers say could allow hackers, or government surveillance agencies, to track users online.
 
Wall Street Journal Hacked Again
Hacked again. That’s the story at the Wall Street Journal this week as the newspaper reports that the computer systems housing some of its news graphics were breached. Customers not affected -- yet.
 
Dropbox for Business Beefs Up Security
Dropbox is upping its game for business users. The cloud-based storage and sharing company has rolled out new security, search and other features to boost its appeal for businesses.
 

Enterprise Hardware Spotlight
Watson Gets His First Customer Service Gig
Since appearing on Jeopardy, IBM's Watson supercomputer has been making a living using his super-intelligent knowledge base for business verticals. Now, Watson's been hired for his first customer service job.
 
Tablet Giants Apple and Samsung Feel the Heat
When a company saturates its home market with a once-hot product, expect it to pump up efforts elsewhere. Apple, for its part, is now pushing iPads to big corporations and the enterprise market.
 
Microsoft Makes Design Central to Its Future
Over the last four years, Microsoft has doubled the number of designers it employs, putting a priority on fashioning devices that work around people's lives -- and that are attractive and cool.
 

Mobile Technology Spotlight
T-Mobile Calls 'BS' on AT&T's New Promotion
While Verizon Wireless is moving to throttle bandwidth hogs, a scrappy T-Mobile is taking on the giants with a limited-time promotion it hopes will drive up the churn rates of its wireless rivals.
 
Microsoft Update to Windows Phone 8.1 Already Coming
An update to Windows Phone 8.1 is on the way just weeks after the release of the product itself. Microsoft has begun detailing some of the update features to phone manufacturers.
 
Stanford Researchers Report Battery Breakthrough
Stanford researchers have found a way to use lithium in a battery's anode, a breakthrough that could triple capacity and has been described as the "holy grail of battery science."
 

Navigation
Sci-Tech Today
Home/Top News | Computing | Digital Life | Discovery | Space | Innovation | Health | Science News
Environment
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.