microsoft

ComputerWorldIndependent

The case against knee-jerk installation of Windows patches

Credit to Author: Woody Leonhard| Date: Mon, 17 Jun 2019 03:10:00 -0700

Heresy. Yes, I know. Any way you slice it, from my point of view anyway, Windows Automatic Update is for chumps.

Just like the “users must be forced to change their passwords frequently” argument that’s no longer au courant, the “users must get patched immediately” argument is based on old, faulty, and totally unsubstantiated claims that make security people feel better — and little else.

With a few notable exceptions, in the real world, the risks of getting clobbered by a bad patch far, far outweigh the risks of getting hit with a just-patched exploit. Many security “experts” huff and puff at that assertion. The poohbahs preach Automatic Update for the unwashed masses, while frequently exempting themselves from the edict.

To read this article in full, please click here

Read More
SecuritySophos

La botnet GoldBrute está intentando hackear 1,5 millones de servidores RDP

Credit to Author: Naked Security| Date: Mon, 10 Jun 2019 16:03:21 +0000

Incluso los usuarios más optimistas tendrán que admitir que han sido unas cuantas semanas estresantes para cualquiera que confíe en el Protocolo de Escritorio Remoto (RDP) de Microsoft. La última ronda de malas noticias surgió la semana pasada cuando el investigador de Morphus Labs, Renato Marinho, anunció el descubrimiento de un ataque agresivo de fuerza [&#8230;]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/BZ2E7ZhZVLc” height=”1″ width=”1″ alt=””/>

Read More
ScadaICSSchneider

Industrial Edge Represents a “New Frontier” Says Microsoft CTO; We Couldn’t Agree More

Credit to Author: Vincenzo Salmeri| Date: Mon, 10 Jun 2019 15:12:00 +0000

Microsoft Chief Technology Officer Kevin Scott is bullish on edge computing technology, particularly the industrial edge. “There’s a whole class of things that we’re able to do with the intelligent… Read more »

The post Industrial Edge Represents a “New Frontier” Says Microsoft CTO; We Couldn’t Agree More appeared first on Schneider Electric Blog.

Read More
MalwareBytesSecurity

A week in security (June 3 – 9)

Credit to Author: Malwarebytes Labs| Date: Mon, 10 Jun 2019 17:30:58 +0000

A weekly roundup of security news from June 3–9, including Magecart, breaches, hyperlink auditing, Bluekeep, FTC, and facial recognition.

Categories:

Tags:

(Read more…)

The post A week in security (June 3 – 9) appeared first on Malwarebytes Labs.

Read More
ComputerWorldIndependent

Save yourself a headache: Make sure Windows automatic update is off

Credit to Author: Woody Leonhard| Date: Mon, 10 Jun 2019 04:22:00 -0700

Read More
ComputerWorldIndependent

It’s time to install the May Windows and Office patches

Credit to Author: Woody Leonhard| Date: Tue, 04 Jun 2019 05:08:00 -0700

May 2019 will go down in the annals of Patch-dom as the month we all ran for cover to fend off another WannaCry-caliber worm, but a convincing exploit never emerged.

Microsoft officially released Windows 10 version 1903 on May 21, but I haven’t yet heard from anyone who’s been pushed. All of the complaints I hear are from those “seekers” who went to the download site and installed 1903 with malice and forethought. A triumph of hope over experience.

This month, if you let Windows Update have its way on your machine, you may end up with a different build number than the person sitting next to you. Blame the gov.uk debacle for that: Folks with Windows set up for U.K. English get an extra cumulative update pushed onto their machines, whilst those who don’t fly the Union Jack will get the fix in due course next month.

To read this article in full, please click here

Read More