Security Advisor

RCE Fixes Win the Attention of June's Microsoft Patch

Microsoft's June security present arrived yesterday, and, as is now the norm, remote code execution fixes make up four of the seven bulletin items. That's because hackers prefer exploiting your system from a distance over having you look over their shoulders when they invade your home.

The consensus among security experts is that bulletin MS12-037, a "cumulative" security update for Internet Explorer should be taken care of immediately. That's because it takes care of a batch of 12 holes -- some that have already been seen being exploited in the wild. And a Web browser seems like an easier window into your system than, say, waiting for you to fall for an elaborate attack in Photoshop.

Along with this batch of fixes, Microsoft is also changing its policy on how your system identifies bogus Microsoft certificates. And if you guessed this is in response to the Flame malware hiding under fake certificates, you would be 100 percent correct.

The major change is that instead of asking for your permission before updating its certificate black list, it will automatically send the information to your system.

About the Author

Chris Paoli is the site producer for Redmondmag.com and MCPmag.com.

Featured

  • Microsoft Issues Windows Server HTTP/2 Attack Advisory

    Microsoft issued Security Advisory ADV190005 on Wednesday concerning a potential HTTP/2 settings issue for users of Internet Information Services (IIS) on Windows Server.

  • Performing a Storage Refresh on Windows Server 2016, Part 2

    Earlier, Brien walked through the steps of preparing a physical Windows Server 2016 machine for a storage refresh. Now, he shows how to complete the process, all the way to OS restoration.

  • New Office App Coming to Windows 10 Users

    Microsoft is delivering a new Office app for Windows 10 consumer and business users over the new few weeks, according to a Wednesday announcement.

  • Microsoft Warns .NET Core 1.0 and 1.1 Losing Support in June

    Microsoft gave notice this week that .NET Core 1.0 and 1.1 will fall out of support on June 27, 2019.

comments powered by Disqus

Office 365 Watch

Sign up for our newsletter.

Terms and Privacy Policy consent

I agree to this site's Privacy Policy.