Massive March Patch Tuesday relaxes antivirus restrictions, but there are problems

Credit to Author: Woody Leonhard| Date: Wed, 14 Mar 2018 06:55:00 -0700

On a scale from 1 to 10, Microsoft in March has ratcheted the patching pace up to 11. The good news is that there are no known exploits for any of the “Critical” rated security holes. (Worth repeating: There are still no known exploits for Meltdown or Spectre.) The bad news? Reports of another forced upgrade to Win10 Fall Creators Update. Still waiting for confirmation on that one.

By the numbers

As usual, Martin Binkmann on ghacks.net, has the best summary:

To read this article in full, please click here

Read more

Turn Automatic Update off, temporarily, in anticipation of another round of pernicious patches

Credit to Author: Woody Leonhard| Date: Mon, 12 Mar 2018 15:14:00 -0700

Read more

Poisoned peer-to-peer app kicked off Dofoil coin miner outbreak

Credit to Author: Windows Defender Research| Date: Tue, 13 Mar 2018 22:27:06 +0000

On March 7, we reported that a massive Dofoil campaign attempted to install malicious cryptocurrency miners on hundreds of thousands of computers. Windows Defender Antivirus, with its behavior monitoring, machine learning technologies, and layered approach to security detected and blocked the attack within milliseconds.Windows 10 S, a special configuration of Windows 10 providing Microsoft-verified security,

Read more

Read more

Get the February Microsoft patches applied, unless you’re using Win10 Fall Creators Update

Credit to Author: Woody Leonhard| Date: Mon, 05 Mar 2018 11:57:00 -0800

Granted, February’s patches from Microsoft weren’t as malevolent as January’s patches, but they still managed to knock out lots and lots of PCs. That said, if you can tiptoe around the problems, now is a good time to get the latest versions of the latest patches installed.

Problems with Win10 Fall Creators Update

The worst problem I see at this point involves clobbered USB connections on Win10 Fall Creators Update (version 1709) machines after installing the latest cumulative update, KB 4074588. To its credit, Microsoft has acknowledged the problem. But the only offered fix, a complex manual workaround, would drive a hardened MS-DOS junkie to drink.

To read this article in full, please click here

Read more

Microsoft Patch day brings bug warnings, another Office CtR, and the return of KB 2952664

Credit to Author: Woody Leonhard| Date: Wed, 28 Feb 2018 05:54:00 -0800

Once upon a time, the fourth Tuesday of the month was reserved by Microsoft for non-security patches. How times have changed. Yesterday, we saw a bunch of new bug warnings — including an admonition to uninstall a previous buggy .Net Preview patch — and an unexpected fourth update this month for Office 365’s reputedly stable Monthly Channel.

New .Net Preview warning to uninstall

The Feb. 2018 .Net Framework Previews — which were pulled last Thursday — got new warnings. Each of these updated KB articles:

To read this article in full, please click here

Read more

Microsoft Patch Alert: February's fixes aren’t as bad as last month, but problems abound

Credit to Author: Woody Leonhard| Date: Mon, 26 Feb 2018 09:34:00 -0800

The January 2018 Microsoft patching cycle may have been the worst and most invasive set of Microsoft releases in recent memory. The February updates, by marked contrast, only clobber a limited number of machines. How many? We don’t know — and Microsoft isn’t saying.

Bad Win10 Fall Creators Update patch

What we do know for sure is that the buggy Win10 Fall Creators Update cumulative update KB 4074588 tossed many PCs into bluescreen hell and disabled USB devices of various stripes. That’s quite an accomplishment for version 1709 which, according to AdDuplex, is now said to run on 85% of all Windows 10 machines. To look at it a different way, Microsoft blew the cumulative update to the most-used version (1709) of the most-used Windows (Win10 now surpasses Win7).

To read this article in full, please click here

Read more

New non-security patches arrive for Win10 1607 and 1703; 1709 update likely soon

Credit to Author: Woody Leonhard| Date: Fri, 23 Feb 2018 04:26:00 -0800

Microsoft last night released a flood of unexpected patches. Yes, that’s a Thursday night dump. No, there weren’t any pressing security fixes – at least, none that were advertised. I have no idea why Microsoft’s pushing this offal out the Automatic Update chute.

In addition to a scattering of Preview patches for Win7, 8.1 and Server 2002 – which are usually posted on the third “Week C” Tuesday of the month – and the Surface Pro 3 firmware patch that was announced, but not delivered, Wednesday, we have two new cumulative updates: one for Win10 Anniversary Update (version 1607) and one for Win10 Creators Update (version 1703). Susan Bradley has a full list with links on the AskWoody site.

To read this article in full, please click here

Read more

Intel releases more Meltdown/Spectre firmware fixes, Microsoft feints an SP3 patch

Credit to Author: Woody Leonhard| Date: Wed, 21 Feb 2018 07:56:00 -0800

One month ago today, Intel told the world that their Meltdown/Spectre patches were a mess. Their advice read something like, “Ooopsie. Those extremely important BIOS/UEFI firmware updates we released a coupla weeks ago are causing Intel machines to drop like bungee cows. In spite of what we told you then, stop installing them now. And if you installed a bad BIOS/UEFI patch, well golly, contact your PC manufacturer to see if they know how to get you out of the mess.”

To read this article in full, please click here

Read more