RSS Reader for Computer Security Articles
Credit to Author: Andrew Brandt| Date: Fri, 14 Dec 2018 09:00:43 +0000
Don’t give your computers a year-end holiday from regular updates this month<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/_muCl0RYPfk” height=”1″ width=”1″ alt=””/>
Read More
Credit to Author: Woody Leonhard| Date: Fri, 21 Dec 2018 08:21:00 -0800
Just when you’re ready to settle in for some egg and nog and whatever may accompany, Windows starts throwing poison frog darts. This month, a fairly boring patching regiment has turned topsy turvey with an unexplained emergency patch for Internet Explorer (you know, the browser nobody uses), combined with an Outlook 2013 patch that doesn’t pass the smell test.
Microsoft set off the shower of firecrackers on Dec. 19 when it released a bevy of patches for Internet Explorer:
Win10 1809– KB 4483235 – build 17763.195
Credit to Author: Naked Security| Date: Fri, 30 Nov 2018 14:25:35 +0000
La autenticación de múltiples factores (MFA) de Microsoft para Office 365 y Azure Active Directory ha caído por segunda vez en una semana. La página de estado de servicio de Azure daba las malas noticias. Entre las 14:25 UTC y las 17:08 UTC del 27 de noviembre de 2018, lo usuarios que usen la autenticación […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/ewC3mls1TOQ” height=”1″ width=”1″ alt=””/>
Read More
Credit to Author: Naked Security| Date: Wed, 28 Nov 2018 15:52:29 +0000
¿Qué pasa en Redmond? Justo unas semanas después de publicar un parche que borraba los ficheros de los usuarios, Microsoft “arregló” Outlook 2010 con el denomiado November Patch Tuesday El 13 de noviembre, Microsoft publicó una actualización de seguridad, KB4461529, que arreglaba cuatro vulnerabilidades de seguridad. Estos fallos podían permitir la ejecución de código remoto […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/tLugGRBa2Nw” height=”1″ width=”1″ alt=””/>
Read More
Credit to Author: Woody Leonhard| Date: Thu, 29 Nov 2018 08:30:00 -0800
By far the most important reason for this month’s relative patching calm: Microsoft decided to wait and get the Windows 10 (version 1809) patch right instead of throwing offal against a wall and seeing what sticks.
What remains is a hodge-podge of Windows patches, some mis-identified .NET patches, a new Servicing Stack Update slowly taking form, a bunch of Office fixes – including two buggy patches that have been pulled and one that’s been fixed – the usual array of Flash excuses and Preview patches.
Credit to Author: Gregg Keizer| Date: Tue, 27 Nov 2018 14:02:00 -0800
Just one day after Microsoft came clean with an explanation of a Nov. 19 outage that blocked users of Office 365 from logging into their accounts using Multi-Factor Authentication (MFA), today the service again went on the fritz.
“Starting at 14:25 UTC on 27 Nov 2018, customers using Multi-Factor Authentication (MFA) may experience intermittent issues signing into Azure resources, such as Azure Active Directory, when MFA is required by policy,” read the Azure status dashboard. Two and a half hours later, the dashboard reported that after resolving a problem with an earlier DNS (Domain Name Service) issue, engineers rebooted the services. “They observed a decrease in the failure rate after the reboot cycles,” the dashboard concluded.
Credit to Author: Woody Leonhard| Date: Mon, 19 Nov 2018 08:15:00 -0800
Two related Office 2010 non-security patches issued on Nov. 6 were pulled on Nov. 17. KB 4461522 and KB 2863821 are both related to changes coming in the Japanese calendar next month attributed to the abdication of Emperor Akihito in favor of his son, Naruhito. The event has been compared to the Y2K problem in the west. It’s not clear why two patches were released on Nov. 6 to accommodate that calendar change, but both KB articles now sport the admonition:
Credit to Author: Gregg Keizer| Date: Fri, 16 Nov 2018 02:59:00 -0800
A Windows expert this week urged Microsoft to put its money where its mouth is and produce a status dashboard or website that reports and tracks problems with the operating system.
Coincidentally or not, on Wednesday Microsoft said it would launch a “Windows update status dashboard,” but did not name a timetable except for a broad “in the coming year.”
“I can go to this page and see if something happening with Office 365 is just a me thing or if everyone else is seeing the same,” said Susan Bradley in a Nov. 13 email reply to questions, referring to the Office 365 Admin Center. (Note: Only those with administrative credentials have access; it’s not meant to provide information to end users.) “(But) if I want to find out if something is a known issue with Windows 10, I have to dig through – and monitor for changes – these pages,” she continued, listing two separate support documents for one such known issue.