Security Advisor

RCE Fixes Win the Attention of June's Microsoft Patch

Microsoft's June security present arrived yesterday, and, as is now the norm, remote code execution fixes make up four of the seven bulletin items. That's because hackers prefer exploiting your system from a distance over having you look over their shoulders when they invade your home.

The consensus among security experts is that bulletin MS12-037, a "cumulative" security update for Internet Explorer should be taken care of immediately. That's because it takes care of a batch of 12 holes -- some that have already been seen being exploited in the wild. And a Web browser seems like an easier window into your system than, say, waiting for you to fall for an elaborate attack in Photoshop.

Along with this batch of fixes, Microsoft is also changing its policy on how your system identifies bogus Microsoft certificates. And if you guessed this is in response to the Flame malware hiding under fake certificates, you would be 100 percent correct.

The major change is that instead of asking for your permission before updating its certificate black list, it will automatically send the information to your system.

About the Author

Chris Paoli is the site producer for Redmondmag.com and MCPmag.com.

Featured

  • Microsoft Warns IT Pros on Windows Netlogon Fix Coming Next Month

    Microsoft on Thursday issued a reminder to organizations to ensure that their systems are properly patched for a "Critical"-rated Windows Netlogon vulnerability before next month's "update Tuesday" patch distribution arrives.

  • Microsoft Nudging Skype for Business Users to Teams

    Microsoft on Thursday announced some perks and prods for Skype for Business unified communications users, with the aim of moving them to the Microsoft Teams collaboration service instead.

  • How To Improve Windows 10's Sound and Video Quality

    Windows 10 comes with built-in tools that can help users get the most out of their sound and video hardware.

  • Microsoft Offers More 'Solorigate' Advice Using Microsoft 365 Defender Tools

    Microsoft issued yet another article with advice on how to use its Microsoft 365 Defender suite of tools to protect against "Solorigate" advanced persistent threat types of attacks in a Thursday announcement.

comments powered by Disqus