Adding transparency and context into industry AV test results

Credit to Author: Windows Defender ATP| Date: Thu, 24 May 2018 19:03:41 +0000

  Corporate Vice President Brad Anderson recently shared his insights on how Windows Defender Advanced Threat Protection (Windows Defender ATP) evolved to achieve important quality milestones. Our Windows Defender ATP team is committed to delivering industry-leading protection, customer choice, and transparency on the quality of our solutions. In the continued spirit of these principles, we

Read more

Read more

Patch update: Monthly Rollup previews arrive for Win7, 8.1, along with updates for Win10 1607, 1703

Credit to Author: Woody Leonhard| Date: Thu, 17 May 2018 12:22:00 -0700

We just got a smattering of patches that seem to be in the “Oh yeah, we forgot” bucket. Windows 7 and 8.1 received Previews (which you should never install, of course). Win10 1607 (out of support for Home and Pro on April 10) and 1703 got the usual laundry list of minor fixes.

I bet Win10 1709 and 1803 updates will be out soon.

Here’s the roundup:

KB 4103713 – Win7 Monthly Rollup preview. Doesn’t solve the network driver uninstallation bug, but does add a new “SMB1 access auditing on Windows Server 2008 R2 SP1.” You have to turn on the auditing with a registry change.

To read this article in full, please click here

Read more

Lots of little Microsoft patches, but nothing for this month’s big bugs — and no Previews

Credit to Author: Woody Leonhard| Date: Wed, 16 May 2018 06:32:00 -0700

Third Tuesday of the month and it’s time for bug fixes and Monthly Rollup Previews, right?

Well, no. May’s Third Tuesday brought a big bag of .Net Framework Previews, microcode patches for Win10 1803 and Server 2016, and a Win10 1803 upgrade nag, but no respite at all for the major problems introduced by this month’s earlier patches.

The .Net Framework Previews

Unless you’re testing your own .Net-based software to make sure it won’t explode next month, you don’t need to think about these. There’s the usual assortment of Previews for .Net Framework 2.0, 3.0, 3.5, 4.5.2, 4.6, 4.6.1, 4.6.2, 4.7 and 4.7.1 for all the usual versions of Windows and Server.

To read this article in full, please click here

Read more

(Insider Story)

Read more

Two more evolving threats: JavaScript in Excel and payment processing in Outlook

Credit to Author: Woody Leonhard| Date: Fri, 11 May 2018 09:04:00 -0700

Once upon a time – dating back to the first “Concept” macro virus in Word – the Office folks were wary of new features that had possible security implications. But in the past few weeks, we’ve been introduced to two new features that have “Kick Me” written all over them.

First, JavaScript in Excel. I mean, what could possibly go wrong?

Last December, Microsoft published a Dev Center article that talked about using the new Excel JavaScript API to create add-ins for Excel 2016.

To read this article in full, please click here

Read more

Surface Pro (2017) owners hitting Win10 1803 update blue screens. Now we know why.

Credit to Author: Woody Leonhard| Date: Fri, 11 May 2018 06:43:00 -0700

As Win10 version 1803 rattles through the unpaid beta-testing phase, it’s snagged another victim — Intel’s aging SSD6 solid-state drives. Both Microsoft and Intel now admit that running Win10 version 1803 on Intel 600p or Pro 6000p is a recipe for disaster.

Some Surface Pro (2017) models ship with “bad” Intel SSD Pro 6000p drives. Customers are complaining about freezes with Win10 version 1803 — and the Microsoft support folks don’t have a clue what’s causing the problem. Now we know.

Here’s how the drama unfolded.

Win10 version 1803 has been in beta testing for centuries, in internet time. The “final” version, build 17134.1, entered the Windows Insider Fast ring almost a month ago, on April 16. In a jumble of mixed-up build numbers, Win10 version 1803 has been officially pushed since April 30. Why did it take so long to figure out that the 600p and Pro 6000p cause problems?

To read this article in full, please click here

Read more

Patch Tuesday problems, fixes — but no cause for immediate alarm

Credit to Author: Woody Leonhard| Date: Thu, 10 May 2018 10:51:00 -0700

Results are starting to roll in about this month’s Patch Tuesday, and it’s quite a mixed bag. For those of you struggling with the new Windows 10 April 2018 Update, version 1803, there’s good news and bad news. The hand wringing about a new VBScript zero-day, thanks to our good old friend baked-in Internet Explorer, looks overblown for now. And if you can’t get RDP working because of “An authentication error has occurred” messages, you missed the memo.

Windows 10 version 1803

First, the good news. As I anticipated earlier this week, this month’s cumulative update for 1803 is a must-have, warts and all. The new build 17134.48 replaces the old 17134.1 (which went to those who installed 1803 directly or fell into the seeker trap) and the old 17134.5 (for those upgrading with the Windows Insider builds). As Susan Bradley explains, 17134.48 claims to fix both the Chrome and Cortana freeze, as well as a major VPN bug.

To read this article in full, please click here

Read more

Microsoft Patch Tuesday, May 2018 Edition

Credit to Author: BrianKrebs| Date: Tue, 08 May 2018 20:38:16 +0000

Microsoft today released a bundle of security updates to fix at least 67 holes in its various Windows operating systems and related software, including one dangerous flaw that Microsoft warns is actively being exploited. Meanwhile, as it usually does on Microsoft’s Patch Tuesday — the second Tuesday of each month — Adobe has a new Flash Player update that addresses a single but critical security weakness. First, the Flash Tuesday update, which brings Flash Player to v. 29.0.0.171. Some (present company included) would argue that Flash Player is in itself “a single but critical security weakness.” Nevertheless, Google Chrome and Internet Explorer/Edge ship with their own versions of Flash, which get updated automatically when new versions of these browsers are made available.

Read more