Do you use, or have you even heard of, Microsoft's Lync or Dynamic AX Enterprise Portal? If so, you should go patch. Along with the other Patch Day bulletins, Microsoft released updates for two products which I suspect only limited audiences know about. Nonetheless, if you use either of these products, you will want to install Microsoft's security updates for them at your … [Read more...]
Archives for June 2012
Four Windows Bulletins Fix RDP, .NET Framework, and Kernel Flaws
Severity: High Summary: These vulnerabilities affect: All current versions of Windows and its optional .NET Framework component. How an attacker exploits them: Multiple vectors of attack, including sending specially crafted network packets or enticing your users to web sites with malicious content Impact: In the worst case, an attacker can gain complete control of your … [Read more...]
Cumulative Patch Plugs 13 Internet Explorer Vulnerabilities
Severity: High Summary: This vulnerability affects: All current versions of Internet Explorer, running on all current versions of Windows How an attacker exploits it: Typically, by enticing one of your users to visit a malicious web page Impact: Various, in the worst case an attacker can execute code on your user's computer, gaining complete control of it What to do: … [Read more...]
Microsoft Black Tuesday: Another Critical RDP Update
If you manage or run Microsoft products, it's time to patch; especially if you use Remote Desktop and expose it outside your network. Microsoft has posted their June security bulletin summary, which describes seven security bulletins fixing 27 vulnerabilities in many of their products, including: Windows Internet Explorer (IE) .NET Framework Microsoft Lync (and … [Read more...]
WatchGuard Security Week in Review: Episode 21
Huge Linkedin Password Leak, Flame Updates, and Microsoft Patch Day Need a quick video summary of the biggest security stories of the week? Well, you've come to the right place. This week's news includes interesting new analysis of the Flame worm, a major Linkedin password leak, and some information about new software updates, including Microsoft's upcoming Patch day. Check … [Read more...]