Another week, another batch of information security (infosec) news. Would you like a quick summary, rather than hunting it down yourself? No problem! Just check out our weekly video every Friday. Today's episode covers the Patch Day bonanza, lots of updates on the Sony Pictures breach, and a new twist on the "Poodle" SSL/TLS vulnerability. Press play for the scoop, and check … [Read more...]
Microsoft's Last Patch Day Until 2015; Three Critical Patches
It's that time of the month again; Microsoft Patch Day. Yesterday, Microsoft posted their regular batch of security updates, so it's time you patch your Windows systems. I'll summarize some Patch Day highlights below, but you should visit Microsoft's December Patch Day Summary page for more details By the Numbers: On Tuesday, Microsoft released seven security bulletins, … [Read more...]
Office Updates Include Patches for SharePoint Vulnerabilities
Severity: High Summary: These vulnerabilities affect: Microsoft Office and related products like SharePoint Server How an attacker exploits them: Varies. Typically by enticing users to open or interact with maliciously crafted Office documents, or interacting with web resources Impact: Many. In the worst case, an attacker can gain complete control of your Windows … [Read more...]
Trio of Office Updates Fix SharePoint Flaw & ASLR Bypass
Severity: High Summary: These vulnerabilities affect: Microsoft Office and related products, including SharePoint How an attacker exploits them: Varies. Typically by enticing users to visit malicious web content or open Office documents Impact: Many. In the worst case, an attacker can gain complete control of your Windows computer What to do: Install the appropriate … [Read more...]
Sharepoint, Excel, and Word Security Updates
Severity: High Summary: These vulnerabilities affect: Microsoft Office related products, including SharePoint, Word, and Excel How an attacker exploits them: Varies. Typically by enticing users to open or interact with maliciously crafted Office documents Impact: Many. In the worst case, an attacker can gain complete control of your Windows computer What to do: Install the … [Read more...]