Browse by Tags

Tagged Content List
  • Blog Post: November 2014 Updates

    Today, as part of Update Tuesday, we released 14 security updates – four rated Critical, nine rated Important, and two rated Moderate, to address 33 Common Vulnerabilities and Exposures (CVEs) in Microsoft Windows, Internet Explorer (IE), Office ...read more
  • Blog Post: Advance Notification Service for the November 2014 Security Bulletin Release

    Today, we provide advance notification for the release of 16 Security Bulletins. Five of these updates are rated Critical, nine are rated as Important, and two are rated Moderate in severity. These updates are for Microsoft Windows, Internet Explorer ...read more
  • Blog Post: Security Advisory 3010060 released

    Today, we released Security Advisory 3010060 to provide additional protections regarding limited, targeted attacks directed at Microsoft Windows customers. A cyberattacker could cause remote code execution if someone is tricked into opening a maliciously ...read more
  • Blog Post: Theoretical Thinking and the June 2014 Bulletin Release

    As security professionals, we are trained to think in worst-case scenarios. We run through the land of the theoretical, chasing “what if” scenarios as though they are lightning bugs to be gathered and stashed in a glass jar. Most of time, ...read more
  • Blog Post: May 2014 Security Bulletin Webcast and Q&A

    Today we published the May 2014 Security Bulletin Webcast Questions & Answers page . We answered 17 questions in total, with the majority focusing on the update for SharePoint ( MS14-022 ), Group Policy ( MS14-025 ) and Internet Explorer ( MS14-029 ...read more
  • Blog Post: The May 2014 Security Updates

    Today, we released eight security bulletins – two rated Critical and six rated Important – to address 13 Common Vulnerability & Exposures (CVEs) in .NET Framework, Office, SharePoint, Internet Explorer, and Windows. We encourage you to ...read more
  • Blog Post: Advance Notification Service for the May 2014 Security Bulletin Release

    Today we provide Advance Notification Service (ANS) for the release of eight bulletins, two rated Critical and six rated Important in severity. These updates will address vulnerabilities for .NET Framework, Office, Internet Explorer, and Windows. As ...read more
  • Blog Post: April 2014 Security Bulletin Webcast and Q&A

    Today we published the April 2013 Security Bulletin Webcast Questions & Answers page . We answered 13 questions in total, with the majority focusing on the update for Internet Explorer ( MS14-018 ) and the Windows 8.1 Update ( KB2919355 ). Two questions ...read more
  • Blog Post: The April 2014 Security Updates

    T. S. Elliot once said, “What we call the beginning is often the end. And to make an end is to make a beginning. The end is where we start from.” So as we put one season to bed, let’s start another by looking at the April security updates ...read more
  • Blog Post: Advance Notification Service for the April 2014 Security Bulletin Release

    Today we provide advance notification for the release of four bulletins, two rated Critical and two rated Important in severity. These updates address issues in Microsoft Windows, Office and Internet Explorer. The update provided through MS14-017 fully ...read more
  • Blog Post: Microsoft Releases Security Advisory 2953095

    Today we released Security Advisory 2953095 to notify customers of a vulnerability in Microsoft Word. At this time, we are aware of limited, targeted attacks directed at Microsoft Word 2010. An attacker could cause remote code execution if someone was ...read more
  • Blog Post: Antimalware Support for Windows XP and the January 2014 Security Bulletin Webcast and Q&A

    Today we’re publishing the January 2014 Security Bulletin Webcast Questions & Answers page . We answered 16 questions in total, with the majority of questions focusing on the Dynamics AX bulletin ( MS14-004 ), the update for Microsoft Word ...read more
  • Blog Post: A Look Into the Future and the January 2014 Bulletin Release

    In January, there are those who like to make predictions about the upcoming year. I am not one of those people. Instead, I like to quote Niels Bohr who said, “Prediction is very difficult, especially if it’s about the future.” However ...read more
  • Blog Post: Advance Notification Service for the January 2014 Security Bulletin Release

    Today we provide advance notification for the release of four bulletins for January 2014. All bulletins this month are rated Important in severity and address vulnerabilities in Microsoft Windows, Office, and Dynamics AX. The update provided in MS14-002 ...read more
  • Blog Post: Improved cryptography infrastructure and the June 2013 bulletins

    It was just over one year ago, May 28, 2012, to be exact, that I transitioned from running active MSRC cases and writing bulletins to my current role managing software security incidents. A lot has changed in that year - and I’ve dealt with some ...read more
  • Blog Post: April 2013 Security Bulletin Webcast, Q&A, and Slide Deck

    Today we’re publishing the April 2013 Security Bulletin Webcast Questions & Answers page . We fielded nine questions during the webcast, with almost half of those focused on the Remote Desktop Client bulletin ( MS13-024 ). One question that ...read more
  • Blog Post: Advanced Notification Service for the June 2013 Security Bulletin Release

    Today we’re providing Advance Notification of five bulletins for release on Tuesday, June 11, 2013. This release brings one Critical- and four Important-class bulletins. The Critical-rated bulletin addresses issues in Internet Explorer, and the ...read more
  • Blog Post: Lovely tokens and the September 2013 security updates

    Helen Hunt Jackson famously wrote, “By all lovely tokens September is here, with summer’s best of weather and autumn’s best of heer.” I share Helen’s clear adoration for this time of year. As a sports fan, there are so many ...read more
  • Blog Post: Q&A from May 2011 Security Bulletin Webcast

    Hello, Today we published the May Security Bulletin Webcast Questions & Answers page . We fielded twelve questions on various topics during the webcast, including bulletins released and the Malicious Software Removal Tool. There were two questions ...read more
  • Blog Post: March 2013 Security Bulletin Webcast, Q&A, and Slide Deck

    Today we’re publishing the March 2013 Security Bulletin Webcast Questions & Answers page . We fielded 13 questions on various topics during the webcast, with specific bulletin questions focusing primarily on Internet Explorer ( MS13-021 ), SharePoint ...read more
  • Blog Post: Advance Notification Service for August 2012 Security Bulletin Release

    Today we're providing advanced notification on the release of nine bulletins, five Critical and four Important, for August 2012. The five Critical security bulletins are addressing ten vulnerabilities in Microsoft Windows, Internet Explorer, Exchange ...read more
  • Blog Post: Advance Notification Service for the March 2011 Security Bulletin Release

    Hello all -- Today, as part of our usual monthly bulletin cadence, we are providing our Advance Notification Service for March's security bulletins. This month we'll release three bulletins, one of them rated Critical and two rated Important, addressing ...read more
  • Blog Post: February 2011 Security Bulletin Release

    Hello all -- Today, as part of our monthly security bulletin release, we have 12 bulletins addressing 22 vulnerabilities in Microsoft Windows, Office, Internet Explorer, and IIS (Internet Information Services). Three bulletins are rated Critical ...read more
  • Blog Post: November 2012 Bulletin Release

    Security Updates Today we released six security bulletins to help protect our customers - four Critical, one Important, and one Moderate – addressing 19 vulnerabilities in Microsoft Windows Shell, Windows Kernel, Internet Explorer, Internet Information ...read more
  • Blog Post: MBSA 2.3 and the November 2013 Security Bulletin Webcast, Q&A, and Slide Deck

    Today we’re publishing the November 2013 Security Bulletin Webcast Questions & Answers page . The majority of questions focused on the ActiveX Kill Bits bulletin ( MS13-090 ) and the advisories. We also answered a few general questions that ...read more