Microsoft

MSRCTeam

Today we’re providing Advance Notification of 10 bulletins for release on Tuesday, May 14, 2013. This release brings two Critical and eight Important-class bulletins, which address 34 unique vulnerabilities. The Critical-rated bulletins address issues in Microsoft Windows and Internet Explorer. Of note, we are working to have the Internet Explorer Security Update address the issue described in Security Advisory 2847140, supplementing the currently available Fix it. The Important-rated bulletins address issues in Microsoft Windows, Microsoft Office, Server and Tools, and .NET Framework.

As always, we will publish the bulletins on the second Tuesday of the month, at approximately 10 a.m. PST. Please revisit this blog at that time for our official risk and impact analysis, along with deployment guidance and a brief video overview of the month’s highlights. Until then, you should review the ANS Summary Page for more information and prepare for bulleting testing and deployment as soon as possible to help ensure a smooth update process.

http://blogs.technet.com/b/msrc/archive/2013/05/09/advance-notification-service-for-the-may-2013-security-bulletin-release.aspx

{ 0 comments }

Keygens and Windows 8

by certifiedbug on May 4, 2013

in Windows OS

msft-mmpc

As we first reported in the Microsoft Security Report Volume 13, Keygens have become the number one threat reported by users of Microsoft antimalware products. The research also indicates that 76 percent of users that downloaded Keygen or software cracks were also exposed to other, more dangerous malware.

Keygens are typically not very dangerous on their own. However, malware authors are having great success using deceptive downloads that either pretend to be Keygens or contain them as well as other malware to spread their malicious payloads. Customers reporting Keygens have higher rates of additional malware infections compared to other threats. Some of these threats try to trick users into paying for software that’s distributed for free from trusted sources.

http://blogs.technet.com/b/mmpc/archive/2013/05/03/windows-8-and-keygens.aspx

{ 0 comments }

MSRCTeam

In celebration of spring’s onset, today we’re providing advance notification for the April 2013 release of nine bulletins; two Critical and seven Important. The Critical bulletins address vulnerabilities in Microsoft Windows and Internet Explorer, and the seven Important-rated bulletins will address issues in Microsoft Windows, Office, Antimalware Software, and Server Software.

As always, we’ll publish the bulletins on the second Tuesday of the month, April 9, 2013 at approximately 10 a.m. PDT. We encourage you to revisit this blog at that time for our risk and impact analysis, as well as deployment guidance and a brief video overview of the month’s updates. Until then, we recommend you review the ANS summary page for more information to help you prepare for bulletin testing and deployment.

http://blogs.technet.com/b/msrc/archive/2013/04/04/advance-notification-service-for-the-april-2013-security-bulletin-release.aspx

{ 0 comments }

MSRCTeam

Today we’re providing advance notification for the release of seven bulletins, four Critical and three Important, for March 2013. The Critical bulletins address vulnerabilities in Microsoft Silverlight, Internet Explorer, Office and Microsoft Server Software. The three Important-rated bulletins will address issues in Microsoft Windows and Office.

As usual, we’ve scheduled the bulletin release for the second Tuesday of the month, March 12, 2013, at approximately 10:00 a.m. PDT. Revisit this blog then for our analysis of the risk and impact, as well as our deployment guidance and a brief video overview of the month’s updates. Until then, we recommend you review the ANS summary page for more information that will help you prepare for bulletin testing and deployment.

http://blogs.technet.com/b/msrc/archive/2013/03/07/advance-notification-service-for-march-2013-security-bulletin-release.aspx

{ 0 comments }

Microsoft Security Bulletin Advance Notification for February 2013

February 8, 2013

MSRCTeam We’re kicking off the February 2013 Security Bulletin Release with Advance Notification of 12 bulletins for release Tuesday, February 12. This release brings five Critical and seven Important-class bulletins, which address 57 unique vulnerabilities. The Critical-rated bulletins address issues in Microsoft Windows, Internet Explorer and Exchange Software. The Important-rated bulletins address issues in Microsoft [...]

Read the full article →

Microsoft and Symantec Take Down Bamital Botnet

February 6, 2013

The Official Microsoft Blog As reported by Reuters earlier today, the Microsoft Digital Crimes Unit, in collaboration with Symantec, has taken down the dangerous Bamital botnet which hijacked people’s search results and took them to potentially dangerous websites that could install malware onto their computer, steal their personal information, or fraudulently charge businesses for online [...]

Read the full article →

Microsoft Security Bulletin Advance Notification out-of-band release

January 13, 2013

TechNet Published: Sunday, January 13, 2013 Version: 2.0 This is an advance notification for one out-of-band security bulletin that Microsoft is intending to release on January 14, 2013. The bulletin addresses a security vulnerability in Internet Explorer. This bulletin advance notification will be replaced with the January bulletin summary on January 14, 2013. For more [...]

Read the full article →

Microsoft Security Advisory 2798897

January 4, 2013

Executive Summary Microsoft is aware of active attacks using one fraudulent digital certificate issued by TURKTRUST Inc., which is a CA present in the Trusted Root Certification Authorities Store. This fraudulent certificate could be used to spoof content, perform phishing attacks, or perform man-in-the-middle attacks. This issue affects all supported releases of Microsoft Windows. TURKTRUST [...]

Read the full article →

Microsoft Security Bulletin Advance Notification for January 2013

January 3, 2013

MSRCTeam With 2013 starting on a Tuesday, our monthly bulletin release is upon us a bit earlier than usual. Next Tuesday we’ll release seven bulletins; two Critical and five Important, which address 12 vulnerabilities. The Critical-rated bulletins address issues in Microsoft Windows, Office, Developer Tools and Microsoft Server Software. The Important-rated bulletins address issues in [...]

Read the full article →

Microsoft Security Bulletin Advance Notification for December 2012

December 7, 2012

MSRCTeam While it may be the most wonderful time of the year, we know it can also be the busiest time of the year. With that in mind, we’re providing advance notification that next Tuesday, Dec. 11, 2012, we’ll release seven security bulletins; five Critical and two Important, which address 11 vulnerabilities. The Critical bulletins [...]

Read the full article →