|

Microsoft and Adobe preview September Patch Tuesday

ByChad

Patch Tuesday. When it releases its monthly patches September 13, Microsoft will publish five bulletins categorized as “important” to close 15 holes. Most of the bulletins fix vulnerabilities in Microsoft Office, which attackers can use to inject malicious code and escalate rights. Arbitrary code can also be executed in the Mac edition of Office, and rights can also be escalated in the server component SharedPoint Workspace. One bulletin closes a hole in all Windows versions starting with XP (including Server) that attackers can use to remotely inject code. It is currently unclear why Microsoft does not categorize this bulletin as “critical.” In addition, Microsoft will fix a privilege escalation problem in Windows Server from version 2003.

Finally, the Windows Malicious Software Removal Tool will receive current virus signatures. September 13 is also Adobe’s patch day. The company announced it will be closing critical holes in all currently maintained versions of Adobe Reader and Acrobat both for Windows and Mac. Adobe also announced it was working to remove compromised DigiNotar-CA certificates from its products. For the time being, Adobe published a workaround for users who do not want to wait for the official update.
Source: http://www.h-online.com/security/news/item/Microsoft-and-Adobe-preview-September-Patch-Tuesday-1340099.html

Discover more from Chad M. Barr

Subscribe to get the latest posts sent to your email.

Similar Posts

|

Firefox 16 re-released fixing multiple vulnerabilities

ByChad

The latest version of Firefox, version 16, returned to Mozilla‘s servers with the release of Firefox 16.0.1 after the discovery of vulnerabilities caused the  organization to remove the just-released update for the Web browser from circulation. Mozilla described the problem as that of a malicious Web site being able to potentially determine the URLs and…

| | | |

Cyber Security Emerging Trends and Threats for 2012

ByChad

During 2011, cyber security incidents included theft of intellectual property and government data, hacktivism, malware targeting mobile devices and a resurgence of the Zeus Trojan, which targets financial information. Protecting against these attacks was a key challenge for organizations of all sizes in both the public and private sectors. What is in store for 2012?…

|

Surf Safe on the Internet

ByChad

It’s important to verify the sites you visit on the Internet. A certain amount of information (such as your IP address and domain name) is automatically sent when you connect. Web sites can also track the pages you visit, determine the version of your browser and operating system, and even compromise files and passwords. Below…

|

PCI Council revokes company’s QSA status

ByChad

Merchants that use Scottsdale, Ariz.-based security services provider Chief Security Officers (CSO) to validate their adherence with the Payment Card Industry Data Security Standard (PCI DSS) will have to find a new assessor. The PCI Security Standards Council, the group responsible for managing payment security, last week revoked CSO’s status as a Qualified Security Assessor…

| |

NCSAM: Week One – Social Networking

ByChad

October is National Cyber Security Awareness Month. Week One: Social Networking – Parents & Kids Social networking is no longer a new phenomenon. While previous generations often became members of social networks as an adult, the upcoming generation will be joining these sites while in elementary, middle or high school – if not earlier. Take…