(Page 2 of 2)
Boring, But Not Easy
This month may be average, but that doesn't mean it'll be an easy one for IT. There are a lot of restarts this month and they affect nearly all Windows operating systems. That's what Paul Henry, security and forensic analyst at Lumension, told us. He also found it interesting, but not surprising, that Microsoft was still working on a fix for the IE zero-day vulnerability.
"If you haven't already, install the FixIt workaround, especially if you're using an older version of IE. There have been reports that the FixIt can be bypassed," Henry said. "We always recommend that you work from the latest version of any software, as that will be the most secure. As this vulnerability only affects older versions of IE, upgrading may be the best way to avoid the vulnerability."
Henry also pointed out that Microsoft last Thursday revoked three certificates from a Turkish certificate authority, EKO, which had been issued to Google.com. Microsoft moved them to the untrusted store, following on the heels of what Google and Mozilla have already done.
"If you're running on anything below Windows 8, be sure to check for the updates to those certificates. If you're on Windows 8 or above, you should be safe because your certificates will automatically be updated. We always advise you to use automatic updates to be sure they are always protected by the most recent certificates," Henry said.
"There is also an Nvidia display driver issue being fixed by Nvidia right now. Unfortunately, Microsoft's Driver Logo Program, which vets all drivers before re-releasing them, may slow the release of this patch to Microsoft users. This issue does affect both Windows 8 and Windows RT."