Windows patches for Total Meltdown, bluescreens, an IP stopper — and little documentation

Credit to Author: Woody Leonhard| Date: Mon, 02 Apr 2018 07:33:00 -0700

As many of us were getting ready for the holiday weekend, after the surprise announcement about Windows being torn into three pieces, Microsoft shoveled yet another load of patches out the Automatic Update chute. Think of it as the software equivalent of a Friday night news dump.

A destructive fix for Total Meltdown

KB 4100480 kicked off the two days from patching purgatory with a Windows 7/Server 2008R2 kernel update for CVE-2018-1038, the “Total Meltdown” bug Microsoft introduced in Win7 back in January. Total Meltdown, you may recall, is a huge security hole implemented by all of these Microsoft security patches:

To read this article in full, please click here

Read more

Microsoft Patch Alert: Windows 7 takes the brunt of March patching problems

Credit to Author: Woody Leonhard| Date: Wed, 28 Mar 2018 10:30:00 -0700

An enormous number of patches spewed out of Microsoft this month, with two ponderous cumulative updates for each version of Windows 10, a third “bonus” bug fix for Win10 Fall Creators Update (version 1709), and a just-described bug in Windows 7 that’ll leave you begging for a Win7 patch that works.

There’s also a bit of comic relief with a patch for Win10 1709, KB 4094276, that “makes improvements to ease the upgrade experience to Windows 10 Version 1709.” That’s a wonderful example of a self-referential fix.

To read this article in full, please click here

Read more

More Windows patches — and warnings about the Win10 1709 update KB 4089848

Credit to Author: Woody Leonhard| Date: Fri, 23 Mar 2018 06:52:00 -0700

“Hey, Cortana.” (Pause.) “Is my PC working yet?”

It’s getting to the point that patches come flying out of Microsoft on any odd day. On most odd days, for that matter. Yesterday, Thursday, was no exception. On March 22 we saw all of these new patches:

Cumulative Updates for Win10

All three of the active versions of Win10 got cumulative updates — the second set in the past two weeks:

  • KB 4089848 brings 1709 (Win10 Fall Creators Update) up to Build 16299.334 – seems to have fixed the problem with the January Delta update
  • KB 4088891 brings 1703 (Win10 Creators Update) up to build 15063.994
  • KB 4088889 brings 1607 (Win10 Anniversary Update) up to build 14393.2155 – this one’s a bit surprising because 1607 is due to go off life support in a couple of weeks.

We also got Servicing Stack Updates for two of the three active versions of Win10:

To read this article in full, please click here

Read more

Why Windows Defender Antivirus is the most deployed in the enterprise

Credit to Author: Windows Defender ATP| Date: Thu, 22 Mar 2018 16:58:23 +0000

Statistics about the success and sophistication of malware can be daunting. The following figure is no different: Approximately 96% of all malware is polymorphic meaning that it is only experienced by a single user and device before it is replaced with yet another malware variant. This is because in most cases malware is caught

Read more

Read more

Sharing research and discoveries at PWN2OWN

Credit to Author: Windows Defender Research| Date: Wed, 14 Mar 2018 23:58:49 +0000

The annual PWN2OWN exploit contest at the CanSecWest conference in Vancouver, British Columbia, Canada, brings together some of the top security talent from across the globe in a friendly competition. For the participants, these events are a platform to demonstrate world-class skills and vie for significant cash prizes. For companies like Microsoft, where we have

Read more

Read more

Flash, Windows Users: It’s Time to Patch

Credit to Author: BrianKrebs| Date: Tue, 13 Mar 2018 19:36:28 +0000

Adobe and Microsoft each pushed critical security updates to their products today. Adobe’s got a new version of Flash Player available, and Microsoft released 14 updates covering more than 75 vulnerabilities, two of which were publicly disclosed prior to today’s patch release. The Microsoft updates affect all supported Windows operating systems, as well as all supported versions of Internet Explorer/Edge, Office, Sharepoint and Exchange Server. All of the critical vulnerabilities from Microsoft are in browsers and browser-related technologies, according to a post from security firm Qualys.

Read more

How artificial intelligence stopped an Emotet outbreak

Credit to Author: Windows Defender ATP| Date: Wed, 14 Feb 2018 14:43:26 +0000

At 12:46 a.m. local time on February 3, a Windows 7 Pro customer in North Carolina became the first would-be victim of a new malware attack campaign for Trojan:Win32/Emotet. In the next 30 minutes, the campaign tried to attack over a thousand potential victims, all of whom were instantly and automatically protected by Windows Defender

Read more

Read more