From the monthly archives:

October 2006

Microsoft TechNet
Updated: October 5, 2006
On 10 October 2006 Microsoft is planning to release:

Security Updates

  • Six Microsoft Security Bulletins affecting Microsoft Windows. The highest Maximum Severity rating for these is Critical. These updates will be detectable using the Microsoft Baseline Security Analyzer. Some of these updates will require a restart.
  • Four Microsoft Security Bulletins affecting Microsoft Office. The highest Maximum Severity rating for these is Critical. These updates will be detectable using the Microsoft Baseline Security Analyzer. These updates may require a restart.
  • One Microsoft Security Bulletin affecting Microsoft .NET Framework. The highest Maximum Severity rating for this is Moderate. These updates will be detectable using the Microsoft Baseline Security Analyzer and the Enterprise Scan Tool. These updates may require a restart.

Microsoft Windows Malicious Software Removal Tool

  • Microsoft will release an updated version of the Microsoft Windows Malicious Software Removal Tool on Windows Update, Microsoft Update, Windows Server Update Services and the Download Center.
    • Note that this tool will NOT be distributed using Software Update Services (SUS).

      Non-security High Priority updates on MU, WU, WSUS and SUS

    • Microsoft will release No NON-SECURITY High-Priority Updates for Windows on Windows Update (WU) and Software Update Services (SUS).

      • Microsoft will release two NON-SECURITY High-Priority Updates on Microsoft Update (MU) and Windows Server Update Services (WSUS).

        • Although we do not anticipate any changes, the number of bulletins, products affected, restart information and severities are subject to change until released.
          © 2006 Microsoft Corporation. All rights reserved.

        The Identity Information Protection Act of 2006 (SB 768) was vetoed by state governor Arnold Schwarzenegger.

        The bill was designed to safeguard against abuse of RFID tags (Radio Frequency Identification) by mandating the use of privacy-protecting technologies such as encryption. The bill would also have given Californians the right to decide who can access their personal information stored on RFID cards.

        Schwarzenegger’s Statement. (PDF)

        RFID: Wikipedia

        Three Russian cyber-criminals jailed

        by certifiedbug on October 5, 2006

        in News, Security

        According to Russian news sources, each of the three extortionists who had aimed botnet-derived DDoS (distributed denial of service) attacks at targeted businesses, received eight year jail sentences.

        Russian security company Kaspersky writes:

        Yesterday a full stop was placed to one of the most notorious cases of cybercrime in Russia over the past few years.

        Kaspersky Lab didn’t take part in this case, although of course we followed it with interest.