It is another Patch Tuesday and I just got an email from Rick Claus from Microsoft Canada’s IT Pro Evangelist team telling me about a new way to get the message out. In a very Canadian (and Irish) way, 3 guys got together over a pint or two and came up with a brilliant idea. Create a simple overview of the new released patches in plain English for the IT Pro, to make it easy to understand what is at risk and what needs to be patched.

Goals:

1. Use plain English terms and every day language that any Technical professional can understand – minimize “corporate speak”.
2. Breakdown each Security Bulletin with summary information first followed by more details as to the impact an IT Pro would face.
3. Outline mitigation factors in case patches couldn’t be tested or applied in a timely fashion
4. Keep it top 15 minutes OR LESS. this one is critical – Keep It Simple, repeatable and get out of the IT Pros way to get on with their day.
5. Have fun!

The Podcast is available from the links below and includes Pierre Roman (IT Pro Advisor / previously a Senior Technical Account Manager), Bruce Cowper (Chief Security Advisor) and Rick Claus (Senior IT Pro Advisor), all from the Microsoft Canada team.

Give it a listen and tell me what you think. Email me at wilbour.craddock@microsoft.com if you like the idea.

Direct Download:

Subscribe to the podcast: (so you don't miss an episode)

Disclaimer: This podcast was produced with the best information available to us at the time of recording. Your primary source for all things Security Bulletin related should always be the Microsoft Security Response Center blog.

In Depth Webcast on this bulletin will take place: Wednesday, April 14th - 11:00 a.m. PST (UTC -8). (Registration link):

Bulletins discussed for April 13th, 2010:

• MS10-019 - Vulnerabilities in Windows Could Allow Remote Code Execution (981210)
• MS10-020 - Vulnerabilities in SMB Client Could Allow Remote Code Execution (980232)
• MS10-021 - Vulnerabilities in Windows Kernel Could Allow Elevation of Privilege (979683)
• MS10-022 - Vulnerability in VBScript Scripting Engine Could Allow Remote Code Execution (981169)
• MS10-023 - Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (981160)
• MS10-024 - Vulnerabilities in Microsoft Exchange and Windows SMTP Service Could Allow Denial of Service (981832)
• MS10-025 - Vulnerability in Microsoft Windows Media Services Could Allow Remote Code Execution (980858)
• MS10-026 - Vulnerability in Microsoft MPEG Layer-3 Codecs Could Allow Remote Code Execution (977816)
• MS10-027 - Vulnerability in Windows Media Player Could Allow Remote Code Execution (979402)
• MS10-028 - Vulnerabilities in Microsoft Visio Could Allow Remote Code Execution (980094)
• MS10-029 - Vulnerability in Windows ISATAP Component Could Allow Spoofing (978338)

Podcast Participants: Pierre Roman, and Bruce Cowper.

Additional Technical Show Notes:

• Recorded at the Ottawa Microsoft Office at the World Exchange Plaza, 100 Queen Street.

New Twitter feed

I wanted to let you know that the MSRC has launched a Twitter feed @MSFTSecResponse http://twitter.com/msftsecresponse

they will use this account to augment the content from the blog. For example, they will use the account to rapidly respond to emerging issues while they are gathering information for a more complete blog post. In addition, they will also use the account as a way to push content to their followers quickly.

Microsoft Security Compliance Manager (http://technet.microsoft.com/en-us/library/cc677002.aspx)

The Security Compliance Manager is the next evolution of the Security Compliance Management Toolkit (SCMT) Series. We’ve taken our extensive guidance and documentation and incorporated it into this new tool, enabling you to access and automate all of your organization’s security baselines in one centralized location.

The Security Compliance Manager provides centralized security baseline management features, a baseline portfolio, customization capabilities, and security baseline export flexibility to accelerate your organization’s ability to efficiently manage the security and compliance process for the most widely used Microsoft technologies.

PodSafe music from PodSafe Music Network @ http://music.podshow.com/. Artist: Derek K Miller, song - “You’re the Big Sky - rock guitar instrumental”

cheers

What do you have to do to entered to win? It’s a simple question with a twist – to find the answer you need to search within the Office 2010 beta, rather than online.

Here goes: In Word 2010 (from the Microsoft Office 2010 beta) you now get a view of Office ‘Backstage’ when you click the ‘File’ button. In ‘Backstage’, what are the three headings hanging under the ‘Info’ section? Download the Office 2010 beta @ www.officeitpro.com and figure it out :) 

Email your answers to endaf@microsoft.com. Winner announced next month.

Please note the Zune product range is currently not supported in Ireland.