News & Information for Technology Purchasers NewsFactor Sites:       NewsFactor.com     Enterprise Security Today     CRM Daily     Business Report     Sci-Tech Today  
   
Home Enterprise I.T. Cloud Computing Applications Hardware More Topics...
Build Apps 5x Faster
For Half the Cost Enterprise Cloud Computing
On Force.com
You are here: Home / Apple/Mac / Patch Tuesday: Least of IT's Problems
DDoS Protection Powered By Verisign
April Patch Tuesday Is the Least of IT's Problems
April Patch Tuesday Is the Least of IT's Problems
By Jennifer LeClaire / NewsFactor Network Like this on Facebook Tweet this Link thison Linkedin Link this on Google Plus
PUBLISHED:
APRIL
10
2013



Microsoft on Tuesday issued nine security bulletins -- including two rated critical. The others were rated important on Redmond's security scale. Still, despite nine patches, security analysts are saying April's Patch Tuesday is not as taxing as other problems IT admins are facing this week.

Indeed, Paul Henry, a security and forensic analyst at Lumension, told us most of the impact is on the legacy code base rather than the current code that has been impacted more than usual over the last few months.

"If your system is running the latest and greatest versions of software -- as you should always do, since newest is usually the most secure -- then you should be minimally impacted this month," Henry said. "Microsoft is not your biggest issue this month, despite nine patches."

No Mad Dog Rush

Andrew Storms, director of security operations at nCircle, told us April's Patch Tuesday is practically boring -- and that's a good thing for IT security teams because there won't be a mad dog rush to get this month's patches deployed. Even the IE bulletin, what Storms deems the usual candidate for the "patch immediately award," only has an exploit index rating of two. That rating indicates that Microsoft believes building a successful attack in the next 30 days will be difficult.

"The second critical bug, a vulnerability in the ActiveX controls for the remote desktop client, presents a more interesting attack scenario. Fortunately, there are enough mitigating circumstances to make it less problematic for most businesses," Storms said.

"The bug does not affect the latest RDP client, version 8, which dramatically reduces the affected number of machines. Microsoft has released mitigation steps to disable the affected ActiveX control. Also, if your users browse with default IE settings, they will be presented the 'gold bar' warning providing them with an opportunity to opt out of an attack."

Tyler Reguly, technical manager of security research and development at nCircle, told us the most notable items are the first appearances of both SharePoint Server 2013 and Windows Defender for Windows 8 in bulletins.

"The most interesting bulletin this month may be MS13-029, Remote Desktop Client ActiveX," he confirmed. "If a lot of people have taken to clicking 'Always trust content from Microsoft' when allowing the ActiveX Control to run, it may end up taking the top priority spot from IE."

Prepare for Attacks

But, as Henry noted, Microsoft is not the IT admin's biggest problem in April. And, for once, Java is not a new problem this month. However, he said, there are issues beyond these two brands to consider. One that concerns Henry is the ongoing issue with Apache, known as Darkleech. (continued...)

1  |  2  |  Next Page >

Tell Us What You Think
Comment:

Name:

Like Us on FacebookFollow Us on Twitter
TOP STORIES NOW
MAY BE OF INTEREST
Salesforce.com is the market and technology leader in Software-as-a-Service. Its award-winning CRM solution helps 82,400 customers worldwide manage and share business information over the Internet. Experience CRM success. Click here for a FREE 30-day trial.
MORE IN APPLE/MAC
Product Information and Resources for Technology You Can Use To Boost Your Business

Network Security Spotlight
Russian Gang with Stolen IDs Hacks Hosting Company
In August, a Russian cyber gang obtained what researchers called “the largest cache of stolen data." Now, those hackers may be putting their ill-gotten gains to criminal use.
 
Dairy Queen Latest Retailer To Report Hack
Known for its hot fries and soft-serve ice cream, Dairy Queen just made cyber history as the latest victim of a hack attack. The fast food chain said that customer data at some stores may be at risk.
 
Lessons from the JPMorgan Chase Cyberattack
JPMorgan Chase is investigating a likely cyberattack. The banking giant is cooperating with law enforcement, including the FBI, to understand what data hackers may have obtained.
 

Enterprise Hardware Spotlight
AMD's New FX Series CPU Breaks Processing Speed Record
The new FX-8370 processor from Advanced Micro Devices has set a record for silicon processor speed, the company announced. Overclocked, the eight-core chip was measured at 8722.78 MHz.
 
Intel Intros Lightning-Fast PC Processors
Call it extreme. Intel just took the covers off its first-ever eight-core desktop processor, which is aimed at hardcore power users who expect more than the status quo from their computers.
 
HP Previews ProLiant Gen9 Data Center Servers
Because traditional data center and server architectures are “constraints” on businesses, HP is releasing new servers aimed at faster, simpler and more cost-effective delivery of computing services.
 

Mobile Technology Spotlight
Rumor Mill Puts Mobile Wallet in iPhone 6
Apple is moving toward the mobile wallet world with its next iPhone. The tech giant has partnered with retailers, banks and major payment networks to make it happen, according to Bloomberg.
 
Will iPhone Finally Catch Up with NFC Mobile Payment Ability?
Apple's latest version of the iPhone may have a mobile wallet to pay for purchases with a tap of the phone. The iPhone 6 reportedly is equipped with near-field communication (NFC) technology.
 
Visual Search To Shop: Gimmick or Game Changing?
Imagine using your phone to snap a photo of the cool pair of sunglasses your friend is wearing and instantly receiving a slew of information about the shades along with a link to order them.
 

Navigation
NewsFactor Network
Home/Top News | Enterprise I.T. | Cloud Computing | Applications | Hardware | Mobile Tech | Big Data | Communications
World Wide Web | Network Security | CRM Systems | Microsoft/Windows | Apple/Mac | Linux/Open Source | Personal Tech | Press Releases
NewsFactor Network Enterprise I.T. Sites
NewsFactor Technology News | Enterprise Security Today | CRM Daily

NewsFactor Business and Innovation Sites
Sci-Tech Today | NewsFactor Business Report

NewsFactor Services
FreeNewsFeed | Free Newsletters

About NewsFactor Network | How To Contact Us | Article Reprints | Careers @ NewsFactor | Services for PR Pros | Top Tech Wire | How To Advertise

Privacy Policy | Terms of Service
© Copyright 2000-2014 NewsFactor Network. All rights reserved. Article rating technology by Blogowogo. Member of Accuserve Ad Network.