Patch Management - Infoworld http://www.infoworld.com/t/2113 en Microsoft confuses Windows 7 users with sudden release of KB 2952664 http://www.infoworld.com/t/microsoft-windows/microsoft-confuses-windows-7-users-sudden-release-of-kb-2952664-241047?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/windows_broken_hp.jpg" alt="Microsoft confuses Windows 7 users with sudden release of KB 2952664" width="243" height="182" align="right" /></div><p>Eagle-eyed Windows 7 users are wondering what's up with <a href="http://support.microsoft.com/kb/2952664" target="_blank">KB 2952664</a>, an "important" patch that arrived unannounced a few hours ago.</p> Microsoft Windows Security Microsoft Windows 7 Microsoft Windows Patch Management Thu, 24 Apr 2014 11:13:07 +0000 InfoWorld Tech Watch 241047 at http://www.infoworld.com Most but not all sites have fixed Heartbleed flaw http://www.infoworld.com/d/security/most-not-all-sites-have-fixed-heartbleed-flaw-240886?source=rss_patch_management <p>The world's top 1,000 websites have been patched to protect their servers against the "Heartbleed" exploit, but up to 2% of the top million were still vulnerable as of last week, according to a California security firm.</p> <p>On Thursday, Menifee, Calif.-based Sucuri Security scanned the top 1 million websites as ranked by Alexa Internet, a subsidiary of Amazon that collects Web traffic data.</p> Security Internet Encryption Patch Management Mon, 21 Apr 2014 13:45:12 +0000 admin 240886 at http://www.infoworld.com KB 2919355: You can't patch the desktop like a phone http://www.infoworld.com/t/microsoft-windows/kb-2919355-you-cant-patch-the-desktop-phone-240878?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/windows_broken_hp.jpg" alt="KB 2919355: You can't patch a desktop like a phone" width="243" height="182" align="right" /></div><p>In sifting through the more than 1,000 Windows 8.1 Update (KB 2919355) complaints and Microsoft's responses, one observation keeps dogging me. Windows 8.1 Update is in many respects being treated as if it were a phone update.</p> Microsoft Windows Security Microsoft Windows 8 Microsoft Windows Patch Management Mon, 21 Apr 2014 11:28:52 +0000 InfoWorld Tech Watch 240878 at http://www.infoworld.com Microsoft tends to enterprise Windows users -- but kicks consumers to the curb http://www.infoworld.com/t/microsoft-windows/microsoft-tends-enterprise-windows-users-kicks-consumers-the-curb-240801?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/windows_broken_hp.jpg" alt="Microsoft tends to enterprise Windows users -- but kicks consumers to the curb" width="243" height="182" align="right" /></div><p>In the past two days we've seen reports about <a href="http://www.infoworld.com/d/microsoft-windows/microsoft-slashed-windows-xp-custom-support-prices-just-days-axing-public-patches-240623">Microsoft reducing the</a></p> Microsoft Windows Microsoft Windows 8 Windows XP Microsoft Windows Patch Management Fri, 18 Apr 2014 11:35:32 +0000 InfoWorld Tech Watch 240801 at http://www.infoworld.com The rise and fall of Heartbleed hysteria http://www.infoworld.com/d/data-explosion/the-rise-and-fall-of-heartbleed-hysteria-240773?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/heartbleed.jpg" alt="The rise and fall of Heartbleed hysteria" width="243" height="182" align="right" /></div> <p>The crescendo of stories dissecting the Heartbleed bug is testimony to just how much <a href="http://www.npr.org/books/titles/146598867/everyone-loves-a-good-train-wreck-why-we-cant-look-away" target="_blank">everyone loves a good train wreck</a>.</p> Data Explosion Security Internet Encryption Open Source Software Patch Management Vulnerability Assessment Fri, 18 Apr 2014 10:00:00 +0000 InfoWorld Tech Watch 240773 at http://www.infoworld.com Windows XP's retirement turns into major security project for Chinese firm http://www.infoworld.com/d/microsoft-windows/windows-xps-retirement-turns-major-security-project-chinese-firm-240688?source=rss_patch_management <p>Microsoft may have retired Windows XP, but one of China's leading security vendors is trying to keep the OS threat-free, and rolling out protection software to hundreds of millions of users in the nation.</p> <p>On April 8, Microsoft officially ended support to the OS, meaning that Windows XP users will no longer receive security updates from the company. In preparation, Chinese security vendor Qihoo 360 has been developing its own free "XP Shield" software for Chinese PC users.</p> Microsoft Windows Security Windows XP Microsoft Windows Patch Management Thu, 17 Apr 2014 11:55:32 +0000 admin 240688 at http://www.infoworld.com Three's a charm? Windows 8 patches could pave multiple paths to Windows 9 http://www.infoworld.com/t/microsoft-windows/threes-charm-windows-8-patches-could-pave-multiple-paths-windows-9-240633?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/Microsoft_Windows_hp.jpg" alt="Three's a charm? Windows 8 patches could pave multiple paths to Windows 9" width="243" height="182" align="right" /></div><p>Trying to piece together the puzzle created by Microsoft's new patching policy, I was struck by an intriguing thought.</p> Microsoft Windows Microsoft Windows 8 Microsoft Windows Patch Management Wed, 16 Apr 2014 19:11:03 +0000 InfoWorld Tech Watch 240633 at http://www.infoworld.com Oracle identifies products affected by Heartbleed, but work remains on fixes http://www.infoworld.com/d/security/oracle-identifies-products-affected-heartbleed-work-remains-fixes-240629?source=rss_patch_management <p>Oracle has issued a comprehensive list of its software that may or may not be affected by the OpenSSL (secure sockets layer) vulnerability known as <a href="http://www.infoworld.com/t/security/5-no-bull-facts-you-need-know-about-heartbleed-right-now-240269">Heartbleed</a>, while warning that no fixes are yet available for some likely affected products.</p> Security Oracle Web Services Patch Management Vulnerability Assessment Wed, 16 Apr 2014 15:51:54 +0000 admin 240629 at http://www.infoworld.com Microsoft slashed Windows XP custom support prices just days before axing public patches http://www.infoworld.com/d/microsoft-windows/microsoft-slashed-windows-xp-custom-support-prices-just-days-axing-public-patches-240623?source=rss_patch_management <p>Just days before Microsoft retired Windows XP from public support, the company drastically reduced the price of custom support agreements that give large companies and government agencies another year of XP patches, experts reported today.</p> Microsoft Windows Security Microsoft Windows XP Microsoft Windows Patch Management Security Wed, 16 Apr 2014 14:45:31 +0000 admin 240623 at http://www.infoworld.com Rushed Heartbleed fixes may expose users to new attacks http://www.infoworld.com/d/security/rushed-heartbleed-fixes-may-expose-users-new-attacks-240597?source=rss_patch_management <p>In the race to protect themselves from the <a href="http://www.infoworld.com/t/security/5-no-bull-facts-you-need-know-about-heartbleed-right-now-240269">Heartbleed</a> vulnerability, enterprises could be opening themselves up to new attacks if they aren't careful.</p> <p>Perpetrators of some of the most virulent cyberattacks on the Internet will try to take advantage of the chaos that's bound to occur in some IT shops as administrators and developers hurriedly respond to Heartbleed, the widespread OpenSSL flaw that was discovered last week, a top researcher at Kaspersky Lab said.</p> Security Encryption Open Source Software Patch Management Vulnerability Assessment Wed, 16 Apr 2014 11:16:08 +0000 admin 240597 at http://www.infoworld.com VMware promises Heartbleed patches for affected products by the weekend http://www.infoworld.com/d/security/vmware-promises-heartbleed-patches-affected-products-the-weekend-240538?source=rss_patch_management <p>VMware started patching its products against <a href="http://www.infoworld.com/t/security/5-no-bull-facts-you-need-know-about-heartbleed-right-now-240269">the critical Heartbleed flaw</a> that puts encrypted communications at risk, and plans to have updates ready for all affected products by Saturday.</p> Security Encryption Patch Management Vulnerability Assessment Tue, 15 Apr 2014 16:13:16 +0000 admin 240538 at http://www.infoworld.com Google patches Android icon permissions attack http://www.infoworld.com/d/security/google-patches-android-icon-permissions-attack-240495?source=rss_patch_management <p>Google has issued a patch for an attack that could lead an Android user to a phishing site, according to security vendor FireEye. FireEye recently spotted an malicious Android application that could modify the icons of other applications so that when they're launched, they send victims to a phishing website.</p> <p>The malware is abusing a set of permissions known as "com.android.launcher.permission.READ_SETTINGS" and "com.android.launcher.permission.WRITE_SETTINGS."</p> Mobile Technology Security Google Android Mobile Security Malware Patch Management Phishing Tue, 15 Apr 2014 11:39:01 +0000 admin 240495 at http://www.infoworld.com Server makers rushing out Heartbleed patches http://www.infoworld.com/d/security/server-makers-rushing-out-heartbleed-patches-240476?source=rss_patch_management <p>Enterprise IT vendors are rushing to protect users from the Heartbleed bug, which has been found in some servers and networking gear and could allow attackers to steal critical data -- including passwords and encryption keys -- from the memories of exposed systems.</p> <p>Hewlett-Packard, Dell, and IBM have set up pages that identify hardware and software products affected by Heartbleed, which exposes a critical defect in certain versions of OpenSSL, a software library for secure communication over the Internet and networks.</p> Computer Hardware Security Servers Patch Management Mon, 14 Apr 2014 21:19:18 +0000 admin 240476 at http://www.infoworld.com Microsoft confirms it's dropping Windows 8.1 support http://www.infoworld.com/t/microsoft-windows/microsoft-confirms-its-dropping-windows-81-support-240407?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/windows_updates_hp.jpg" alt="Microsoft confirms it's dropping Windows 8.1 support" width="243" height="182" align="right" /></div><p>In what is surely the most customer-antagonistic move of the new Windows regime, Steve Thomas at Microsoft posted a TechNet article on Saturday stating categorically that <a href="http://blogs.technet.com/b/gladiatormsft/archive/2014/04/ Microsoft Windows Security Microsoft Windows 8 Microsoft Windows Patch Management Mon, 14 Apr 2014 11:15:41 +0000 InfoWorld Tech Watch 240407 at http://www.infoworld.com Don't overlook URL fetching agents when fixing Heartbleed flaw on servers, researchers say http://www.infoworld.com/d/security/dont-overlook-url-fetching-agents-when-fixing-heartbleed-flaw-servers-researchers-say-240335?source=rss_patch_management <p>Website operators should assess their whole Web infrastructure when patching <a href="http://www.infoworld.com/d/security/the-heartbleed-openssl-flaw-worse-you-think-240231">the critical Heartbleed flaw in OpenSSL</a>, otherwise they risk leaving important components open to remote attacks, despite fixing the problem on their publicly facing servers.</p> Security Encryption Patch Management Security Tools Vulnerability Assessment Fri, 11 Apr 2014 15:44:51 +0000 admin 240335 at http://www.infoworld.com Website operators will have a hard time dealing with the Heartbleed vulnerability http://www.infoworld.com/d/security/website-operators-will-have-hard-time-dealing-the-heartbleed-vulnerability-240305?source=rss_patch_management <p>Website and server administrators will have to spend considerable time, effort, and money to mitigate all the security risks associated with <a href="http://heartbleed.com/" target="_blank">Heartbleed</a>, one of the most severe vulnerabilities to endanger encrypted SSL communications in recent years.</p> Security Encryption Open Source Software Patch Management Vulnerability Assessment Fri, 11 Apr 2014 11:48:48 +0000 admin 240305 at http://www.infoworld.com Adobe patches a critical flaw in Flash Player and AIR shown at Pwn2Own contest http://www.infoworld.com/d/security/adobe-patches-critical-flaw-in-flash-player-and-air-shown-pwn2own-contest-240152?source=rss_patch_management <p>Adobe Systems released security updates for Flash Player and AIR in order to address four critical vulnerabilities that could lead to arbitrary code execution and information disclosure.</p> Security Adobe Adobe Flash Patch Management Vulnerability Assessment Wed, 09 Apr 2014 13:07:55 +0000 admin 240152 at http://www.infoworld.com Is Windows Update's huge Visio 2013 patch a joke? http://www.infoworld.com/t/patch-management/windows-updates-huge-visio-2013-patch-joke-240140?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/Microsoft_hp.jpg" alt="Is Windows Update's huge Visio 2013 patch a joke?" width="243" height="182" align="right" /></div><p>What in the world is going on with Microsoft's Visio?</p> Microsoft Windows Microsoft Microsoft Windows Patch Management Wed, 09 Apr 2014 10:30:00 +0000 InfoWorld Tech Watch 240140 at http://www.infoworld.com Microsoft Patch Tuesday bids adieu to Windows XP http://www.infoworld.com/d/security/microsoft-patch-tuesday-bids-adieu-windows-xp-240131?source=rss_patch_management <p>This month's "Patch Tuesday" includes the final round of security fixes Microsoft will issue for Windows XP, potentially leaving millions that continue to use the OS open to attack.</p> Microsoft Windows Security Microsoft Windows XP Microsoft Windows Patch Management Wed, 09 Apr 2014 10:00:00 +0000 admin 240131 at http://www.infoworld.com Microsoft yanks SharePoint 2013 Service Pack 1, KB 2817429 http://www.infoworld.com/t/microsoft-windows/microsoft-yanks-sharepoint-2013-service-pack-1-kb-2817429-239969?source=rss_patch_management <div id="tw-edit" style="padding: 8px; background: none no-repeat scroll center top #ffffff; position: relative; float: right; width: 243px; height: 182px;"><img src="http://www.infoworld.com/sites/infoworld.com/files/media/image/07OPenterwin_hp.jpg" alt="Microsoft yanks SharePoint 2013 Service Pack 1, KB 2817429" width="243" height="182" align="right" /></div><p>On Feb. 25, Microsoft announced that <a href="http://blogs.office.com/2014/02/25/office-2013-service-pack-1-now-available/" target="_blank">SharePoint 2013 Service Pack 1 was available</a> at the Microsoft Download Center. Applications Microsoft Windows Microsoft Microsoft SharePoint Microsoft Windows Office Software Patch Management Mon, 07 Apr 2014 11:12:53 +0000 InfoWorld Tech Watch 239969 at http://www.infoworld.com