Access member only content, take part in discussions with comments on blogs, news and reviews and receive all the latest security industry news directly to your inbox. Join now for free.
Processing registration... Please wait.
This process can take up to a minute to complete.
A confirmation email has been sent to your email address - SUPPLIED EMAIL HERE. Please click on the link in the email to verify your email address. You need to verify your email before you can start posting.
If you do not receive your confirmation email within the next few minutes, it may be because the email has been captured by a junk mail filter. Please ensure you add the domain @scmagazine.com.au to your white-listed senders.
Microsoft expects to release eight patches to address 23 security vulnerabilities in Windows and other products next month.
The bulletins, of which two are rated “critical” and six “important,” are due 11 October.
The critical patches will address flaws in Microsoft Windows, Internet Explorer, Silverlight, and the company's .NET framework that could allow for the propagation of an internet worm without user action, according to an advance notification advisory.
The important fixes will correct issues that could result in users' data being compromised or cause a denial of service.
One of the important bulletins is particularly interesting because it affects Forefront Unified Access Gateway, security software used by employees for remote access, Rapid7 security researcher Marcus Carey said.
“No one wants to hear that software that is designed for security is vulnerable to remote code execution,” Carey said.
“This bulletin and the related vulnerabilities will definitely pique a lot of attackers' interest. Organisations should keep an eye out for suspicious activity on servers running this software.”
Nearly all of the patches, meanwhile, will require a restart, which will cause widespread disruptions across both internet-connected servers and user community desktops, according to Paul Henry, security and forensic analyst at vulnerability management firm Lumension.
Microsoft last month released five security bulletins correcting six vulnerabilities in SharePoint, Excel, Office, Windows and the Windows Internet Name Service.
This article originally appeared at scmagazineus.com
To begin commenting right away, you can log in below or register an account if you don't yet have one. Please read our guidelines on commenting. Offending posts will be removed and your access may be suspended. Abusive or obscene language will not be tolerated. The comments below do not necessarily reflect the views or opinions of SC Magazine, Haymarket Media or its employees.