Optimal Security : the Lumension Blog

Microsoft announced that they have released four security bulletins to address five separate current vulnerabilities. Especially concerning this month is the fact that all three bulletins rated “critical” also rate a “1” on Microsoft’s exploitability index (with MS10-042 addressing a vulnerability that is actively being exploited.)  Additionally, MS10-043 requires a reboot and affects Windows Server [...]

I recently helped a friend set up her new Win7 box – it was a breeze, especially when compared to (or perhaps because of) the Vista lappie I set up for her a couple of years back. We had to do it because her old box was still running WinXP SP2 – and we couldn’t [...]

Paul Henry, Forensics and Security Analyst, provides his insights in this June 2010 Patch Tuesday Security Briefing.

It might be the start of summer, but there was little sunshine from Microsoft on Tuesday, as the company warned users that they have released ten security bulletins — three of which are critical, seven are rated important and all of which include an explicit or possible restart warning. The impact will be felt enterprise-wide, [...]

Paul Henry, Forensics and Security Analyst, provides his insights in this May 2010 Patch Tuesday Security Briefing.

Microsoft has released two security bulletins this month, MS10-030 and MS10-031 to address two vulnerabilities in Microsoft Windows and Microsoft Office, both rated Critical. As both bulletins are rated as critical, they will both demand a high priority in their deployment across the enterprise.
Details:
MS10-030 resolving one vulnerability affecting Outlook Express, Windows Mail and Windows Live [...]

Paul Henry, Forensics and Security Analyst, provides his insights in this April 2010 Patch Tuesday Security Briefing.

After last month’s light load of patches, Microsoft today released a total of 11 patches to address 25 various vulnerabilities. Of these 11, five of the patches are critical and involve remote code execution, and four require a restart. The five critical bulletins affect all versions of Windows software that are widely being used and [...]

Microsoft announced today they will be releasing a critical out-of-band patch MS10-018. From an impact perspective, this is a remote code execution and impacts Internet Explorer (IE) versions 6 and 7.  The unscheduled release is in response to a reported upswing in attacks against Microsoft customers as detailed in Microsoft Security Advisory 981374. Beyond the [...]

Paul Henry, Forensics and Security Analyst, provides his insights in this March 2010 Patch Tuesday Security Briefing.