Outlook 2010 Tower of Babel patch KB 4011089 breaks VBScript print

Credit to Author: Woody Leonhard| Date: Fri, 15 Sep 2017 05:27:00 -0700

Read more

If you can’t avoid Word's 'Enable Editing,' patch Windows right now

Credit to Author: Woody Leonhard| Date: Thu, 14 Sep 2017 06:55:00 -0700

In the normal course of events, it takes a week (or two or three) for the bugs in each month’s Windows and Office security patches to shake out. This month’s patches are no exception. There are lots of reports of problems with IE and Edge, for example, and many more are piling up.

In the normal course of events, the fresh-off-the-press security patches present more of a threat to most people in the short term than do the problems the patches are supposed to fix. You have to patch sooner or later, but by waiting for the screams of pain to die down, you can save yourself some major headaches.

To read this article in full or to leave a comment, please click here

Read more

IDG Contributor Network: September Patch Tuesday brings critical updates for Window, Edge and .NET

Credit to Author: Greg Lambert| Date: Wed, 13 Sep 2017 11:00:00 -0700

September brings a relatively large patch profile for Microsoft with 76 reported vulnerabilities, three public disclosures (thank you, Google) and unfortunately one zero day exploit. You used to be worried about browsers and Flash, now we have a publicly exploited vulnerability for augmented reality (AR) with a fix for Microsoft’s HoloLens headset.

For this September Patch Tuesday, Microsoft is only shipping security updates with patches to the following product groups:

Read more

Bloated Patch Tuesday brings fix for nasty Word/RTF/Net vulnerability

Credit to Author: Woody Leonhard| Date: Wed, 13 Sep 2017 04:16:00 -0700

Microsoft on Tuesday released 259 individual security patches, covering 82 security holes (counting by CVE number). You may feel rushed to apply those patches, particularly when you hear about a really bad vulnerability involving Word, RTF, and the .NET Framework. The facts are a little less alarmist.

Here’s a quick overview. The SANS Internet Storm Center has its usual handy list of CVEs and whether there are any known exploits. Martin Brinkmann at Ghacks stacks them up this way:

To read this article in full or to leave a comment, please click here

Read more

Windows Hello for Business: Next-gen authentication for Windows shops

Credit to Author: Jonathan Hassell| Date: Wed, 13 Sep 2017 04:01:00 -0700

Authentication: the act of proving one’s identity to the satisfaction of some central authority. To most, this process means typing in a username and a password. It’s been this way for years and years.

To read this article in full or to leave a comment, please click here

(Insider Story)

Read more

Equifax security breach debacle thickens with improbable denials

Credit to Author: Woody Leonhard| Date: Fri, 08 Sep 2017 06:55:00 -0700

No doubt you’ve heard about the stolen data at credit reporting agency Equifax. The company’s official disclosure appeared yesterday:

Equifax Inc. (NYSE: EFX) today announced a cybersecurity incident potentially impacting approximately 143 million U.S. consumers. Criminals exploited a U.S. website application vulnerability to gain access to certain files. Based on the company’s investigation, the unauthorized access occurred from mid-May through July 2017. … The information accessed primarily includes names, Social Security numbers, birth dates, addresses and, in some instances, driver’s license numbers.

To read this article in full or to leave a comment, please click here

Read more