I’m Dustin, a Security Program Manager in the Microsoft Security Response Center (MSRC). We have received a few questions regarding a public issue and we wanted to update you on the status of how we plan to address it. The issue revolves around Security Advisory 951306 . We originally posted this advisory in March as a result of an issues discussed publicly that described a method of using system tokens to elevate privileges on Windows XP and 2003 systems. As always, we began our investigation...

Hi All, Mike Reavey, here. Just wanted to let you know that based on customer feedback, w e have set up two additional Security Bulletin Webcasts related to this o ut - of -b and release. Details are below: · For the Thursday , 10/23/08 , 5:00 PM Webcast , c ustomers can register at: http://msevents.microsoft.com/CUI/EventDetail.aspx?EventID=1032394183&Culture=en-US · For the Friday , 10/24/08 , 11:00 AM Webcast , c ustomers can register at: http://msevents.microsoft.com/CUI...

Hi, On Thursday, October 23, 2008, Microsoft released an Out-Of-Band Security Bulletin (MS08-067). To meet the customer demand for information relating to this release, Microsoft conducted three customer webcasts. Two of these webcasts were conducted on Thursday, October 23 rd and the other on Friday, October 24 th . The link below will direct you to a collection of all questions answered during the three webcasts. Here is the link to the full Q&A so you can see all of the answers...

Hello Everyone! This is Steve Adegbite. I am new to the MSRC Crew. I work with Simon and Tami to help manage Microsoft’s security update releases. I also help with Microsoft’s Partner outreach effort and the Microsoft Active Protections Program (MAPP). So from time to time you will be hearing from me. For my first post, I want to go ahead and let you know about today’s update release. I also want let you know of the launch of the Microsoft Active Protections Program (MAPP) and Exploitability...

Hi, During this month’s webcast we were able to address 18 questions in the time allotted. The questions were spread fairly evenly across all bulletins, as well as the Exploitability Index that was released for the first time with this Bulletin Release Cycle. Here is the link to the full Q&A so you can see all of the answers that were provided for these great questions: http://blogs.technet.com/msrc/pages/monthly-security-bulletin-webcast-q-a-October-2008.aspx Also, here...