MS skips March Patch Tuesday
27911
Nothing to see here, please move along Microsoft announced on Thursday that doesn't plan to issue any security updates next week in a rare break from its regular monthly Patch Tuesday update cycle.â¦
318919
Maybe they are busy prepping for CES, but Microsoft only plans to issue two patches for the first Patch Tuesday of the new year.
749368
Customers using Microsoft products that have entered their "Extended" support phase will need to fork over $4,000 for a patch that makes the software compatible with the new March 11 date for Daylight Saving Time (DST), according to Microsoft watcher Mary Jo Foley.
104531
Microsoft's technical support personnel only just this week discovered that its various patches for Windows, Exchange Server, Outlook, and other tools should be installed in a precise order, otherwise they may not actually be patching networks to properly deal with the upcoming Daylight Savings Time shift, now one week earlier.
734469
(InfoWorld) - With hackers exploiting unpatched vulnerabilities in its Windows and Office software, Microsoft plans to issue 11 security updates next Tuesday. Some of the Office and Windows updates will be for critical flaws that could be exploited by attackers with no action on the part of users. Six of the patches will be for Windows, and four of them will be for Office, MicrosoftÂ said Thursday in a note on its Web site. The 11th update will be for a flaw in Microsoft's .Net framework, which is considered less severe than the critical Windows and Office patches. Hackers have been keeping Microsoft's Security Response Center busy this past month. Microsoft generally issues its security patches on the second Tuesday of every month, but last weekÂ the company was forced to issue a rare, "out-of-cycle" security patchÂ after criminals began exploiting a flaw in Internet Explorer's VML (Vector Markup Language) rendering engine. And security experts have also warned of cyberattacks based on unpatched flaws in PowerPoint, Word 2000 and in an ActiveX control (called WebViewFolderIcon) used by the Windows' graphical user interface software. The WebViewFolderIcon flaw will be patched Tuesday, Microsoft said. Attacks that take advantage of this flaw have been seen on the Internet, the SANS Internet Storm CenterÂ warned earlier this week. Â
270518
InfoWorld - With Microsoft&#39;s monthly patch release expected on Tuesday, scammers are sending out fake security bulletins that attempt to install malicious software on victim&#39;s computers.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
515724
Microsoft (Nasdaq: MSFT) has issued its first patch for Service Pack 2, which has been on the market for just a month and a half. The patch fixes a flaw in the VPN, or virtual private  network.
429232
DecemberÃ¢ÂÂs Patch Tuesday finds Vista in the bad guysÃ¢ÂÂ sights. Plus: Get Office 2007 SP1, get your fix for Flash, and avoid an HP laptop disaster.
17746
SEATTLE -- Microsoft released a patch for its latest &quot;critical&quot; rated security flaw affecting its Windows, Office and developer tools software programs, the company said Tuesday.
401668
Forget the Monday morning blues. For Windows administrators, the second Tuesday of the month has become the day to dread. That&#39;s the day when Microsoft releases its monthly package of patches.
744189
InfoWorld - Microsoft plans to issue two security updates for its Windows operating system products next Tuesday as part of its regular software patch cycle.
708266
A day after Microsoft announced it would give customers early warning of impending patches, the Redmond, Wash.-based developer fleshed out its heads-up with a notice that next Tuesday&#39;s patches
230996
Blog: Microsoft revises one of its critical security bulletins from patch Tuesday, now including a fix for Microsoft Office 2004 for the Mac.
364981
It is unclear whether any of the three patches Microsoft (Nasdaq: MSFT) is releasing tomorrow will address a recently identified flaw that one security firm upgraded on Friday to 'extremely critical.'
755667
For its &quot;Patch Tuesday&quot; this month, Microsoft delivered five security bulletins for what it called &quot;important&quot; security flaws, including one publicly known flaw in the Windows Internet Naming Service (WINS).
642533
(InfoWorld) - MicrosoftÂ released its February set of security updates Tuesday, including critical fixes for bugs in Office and the scanning engine used by the company's security products. The security software flaw is of particular concern because it could, in theory, be very easily exploited by an attacker to run unauthorized software on a victim's PC. The bug has to do with the way that Microsoft's Malware Protection Engine, used by Windows Live One Care and Windows Defender, processes PDF files. Windows Defender is available for free and ships with Microsoft's Vista operating system. "An attacker could exploit the vulnerability by constructing a specially crafted PDF File that could potentially allow remote code execution when the target computer system receives, and the Microsoft Malware Protection Engine scans, the PDF file," Microsoft said in its bulletin on the patch. This engine is also used by Microsoft's Antigen and Windows Forefront Security products, meaning that Exchange servers running these products could also be compromised. Although there is not yet any known attack that exploits this flaw, it could become a serious problem for Windows users running Microsoft's security products, according to Amol Sarwate, vulnerability lab manager at Qualys. "These attacks are very difficult to avoid," he said. "These products run automatically in the background." Symantec rated this scanning engine flaw the most critical of the vulnerabilities patched on Tuesday. Microsoft actually released the patch for this flaw on Jan. 26, although it did not notify customers of this bug until Tuesday's bulletin, said Mark Griesi, a security program manager with the company's Trustworthy Computing group. Griesi said that there was no particular reason why Microsoft declined to notify customers of the update. But the fact that this was Microsoft's first security product patch since implementing its monthly system apparently contributed to the decision. "It was one of those first-time situations: 'Should we say something now or should we just wait,'" he said. "This time we decided to wait. We won't do it again." In total, six of Microsoft's 12 updates are rated as "critical," the other six have the less-serious rating of "important." Among the patches is a widely anticipated update for Microsoft Word , which fixes six bugs in Microsoft's word processing software. Hackers had been exploiting a number of these bugs in very targeted attacks over the past few months. The updates fix 20 bugs in total, including all four of the Word flaws that hackers had been exploiting, Griesi said. Other critical patches fix bugs in the ActiveX HTML Help control and Microsoft Data Access Components, both used by Windows, as well as flaws in Office and Internet Explorer.