United States
Web App Attacks: Sneaking in the Front Door
WatchGuard Technologies, Inc.
WatchGuard Technologies, Inc.
ProductsPartnersSupportAbout UsHow to BuySearchProfile
 
Products  

Security Articles

Video Tutorials

WatchGuard Feeds

WatchGuard Wire

Radio Free Security

White Papers

Case Studies

Network Security Glossary

WatchGuard Wire
Improve Your Security IQ

April's Microsoft Patch Day clocks in at eleven bulletins

9 April, 2010 -- Is it just me, or does Microsoft seem to always follow up light Patch Days with really heavy ones? Last month, you only had to worry about two, non-critical Micsoft patches. This month, Microsoft plans to release eleven bulletins, and five of them are critical. 

According to their Advance Notification, next Tuesday's eleven bulletins will contain eight Windows updates, two Office updates, and a combined Windows and Exchange update. As usual, you should try to apply Microsoft's Critical updates as soon as you can, since they tend to fix vulnerabilities that allow remote attackers to gain control of your Windows computers. Also, I recommend you test the patches on non-production machines before deploying them throughout your network (mostly server related patches like the Exchange one). 

While on the subject of patches, don't forget that Adobe also chose the second Tuesday of the month for their designated patch day. According to Adobe's pre-notification for April 13, they too plan on releasing at least one advisory during Microsoft Patch Day, to fix an Adobe Reader and Acrobat flaw. Since Adobe Reader flaws are the most exploited on the web, I recommend you try to install this patch next Tuesday too, if you have enough time.

We'll know more about Microsoft and Adobe's bulletins next Tuesday, and will publish alerts about them via LiveSecurity and LiveSecurity Informer. -- Corey Nachreiner, CISSP

Copyright© 2010 WatchGuard® Technologies, Inc. You may copy and distribute this article freely in any medium as long as you copy and distribute the entire article without change and preserve this copyright statement and notice.