If there is one day of the month you should really focus on software patching, this is the day. The second Tuesday of the month is both Microsoft and Adobe patch day. If you run a Windows shop, or you use Adobe products on any platform, it's time for you to get patching! As they promised, Microsoft released seven bulletins today to fix a wide range of security vulnerabilities … [Read more...]
Office Updates Include Patches for SharePoint Vulnerabilities
Severity: High Summary: These vulnerabilities affect: Microsoft Office and related products like SharePoint Server How an attacker exploits them: Varies. Typically by enticing users to open or interact with maliciously crafted Office documents, or interacting with web resources Impact: Many. In the worst case, an attacker can gain complete control of your Windows … [Read more...]
Heartbleed Bug- WSWiR Episode 102
April Patch Day, Raided Pen-Tester, and OpenSSL Heartbleed Information security news never stops, even if I have to post it from a Changi Airport lounge. If you need to learn the latest cyber security news, including what to do about the biggest vulnerability of the year (so far), you've found the right weekly video blog. This week's "on-the-road" episode covers Adobe and … [Read more...]
Office Updates Fix Word 0day and Publisher Flaw
Severity: High Summary: These vulnerabilities affect: Microsoft Word, Publisher, and Office Web Apps How an attacker exploits them: Typically by luring your users into opening malicious Office documents Impact: In the worst case, an attacker can execute code, potentially gaining complete control of your computer What to do: Install the appropriate Microsoft updates as soon … [Read more...]
APT Blocker – WSWiR Episode 101
April Patch Day, NSA Encryption Backdoors, and APT Blocker Ready for your weekly summary of InfoSec news? Well here it is. This week's episode covers what you need to know about next week's Microsoft patch day, shares details about the latest NSA/RSA encryption scandal, and unveils WatchGuard's latest security service, which can protect you from zero day malware. Watch the … [Read more...]