No Love for IT this February Patch Tuesday

Email     |     Share  
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9
Next No Love for IT this February Patch Tuesday-6 Next


The next bulletin is MS14-009, which covers three vulnerabilities in the .NET framework that could allow elevation of privilege. The aggregate severity for the bulletin is important and it is applicable to all shipping versions of Windows from XP through 8.1. Of the three vulnerabilities covered, two were publicly disclosed and one has known active attacks. MS14-009 is the second bulletin released by Microsoft, along with MS14-005, that has active attacks and requires another vulnerability to effectively commandeer a system. This leads Ernst to believe attackers are getting more sophisticated in coordinating their attacks.

Microsoft was looking to deliver a light Patch Tuesday this month, but added two last-minute bulletins to the mix. February now includes seven bulletins, four critical and three important, that cover a total of 32 CVEs. The patches address vulnerabilities in Windows, Internet Explorer, Security Software and the .NET framework. Russ Ernst, director of product management at Lumension, takes a closer look at this February's Patch Tuesday.


Related Topics : Unisys, Stimulus Package, Security Breaches, Symantec, Electronic Surveillance

More Slideshows

Social14-190x128.jpg 10 Ways to Improve Your Social Media Security Policy and Posture

When phone calls, video conference information, pictures, chat logs, etc. are all stored in a central location via social media, a potential hacker has access to just about everything, quickly and easily. ...  More >>

Security120-290x195 5 DDoS Myths Debunked

Unearth the real story behind five commonly held myths about distributed denial-of-service attacks. ...  More >>

Security119-190x128 8 Tips for Ensuring Employee Security Compliance

IT security ultimately depends on making sure employees use the appropriate tools and comply with policies designed to protect them and their data/applications. ...  More >>

Subscribe to our Newsletters

Sign up now and get the best business technology insights direct to your inbox.