Craig Burton

Microsoft issued a warning about using Internet Explorer for browsing.

Security experts were still trying to determine Friday how IIS servers were compromised and whether applying the latest patches for IIS and Internet Explorer would protect users from the attacks.
“My gut feeling is (patching) doesn’t protect you,” Dunham said. “If I were a home user, [...]

[Read more →]

BigFix next month plans to upgrade its patch and configuration management software to support mobile laptops and help customers check computers for security holes before letting any devices onto a network.
The company will ship its Mobile Security Manager, an agent that sits on a Windows-based laptop and monitors patch, anti-virus and system configurations and keeps [...]

[Read more →]

According to Mary Jo Foley, Microsoft is sticking with its plan to end support for NT 4.0:

On December 31, Microsoft will cut the support cord for NT 4.0 Server. Until then, Redmond is providing paid-incident and security-related hot fixes to NT 4.0 Server customers. Non-security-related hot fixes have been available to NT 4.0 Server customers [...]

[Read more →]

A little old, but a good read about the patch process at Microsoft.

For example, in the case of 03-026, Microsoft estimates that it devoted more than 1,150 person hours across 17 days to release the patch.

[Read more →]

Via Donna’s Security NewsFlash

eEye(R) Digital Security and BigFix today announced a partnership to provide the industry’s first fully integrated vulnerability assessment and remediation solution. eEye will integrate the BigFix Enterprise Suite with eEye’s Retina(R) Enterprise Suite. The resulting offering will represent a unique, end-to-end vulnerability assessment and remediation management solution that allows enterprises to quickly [...]

[Read more →]

Via Mary Jo Foley

Microsoft is offering an RSS feed for its security bulletins over on TechNet, as several bloggers have noted. Expect to see lots more new RSS feeds from a variety of Microsoft teams in the coming months.
Finally.

[Read more →]

A CNet article reported:

An analysis from the General Accounting Office says that only four of 24 agencies “monitor all of their systems on a regular basis” to spot computers that need upgrades, and two agencies did not know how to “verify that remote users” have received the latest updates.
If you can not prove–on an ongoing [...]

[Read more →]