投機的実行に関する報奨金プログラムの開始
Friday, March 23, 2018
本記事は、Microsoft Security Response Center のブログ “Speculative Execution Bounty Launch” (2016 年 3 月 14 日 米国
2018
Mitigating speculative execution side channel hardware vulnerabilities
Wednesday, March 14, 2018
On January 3rd, 2018, Microsoft released an advisory and security updates related to a newly discovered class of hardware vulnerabilities involving speculative execution side channels (known as Spectre and Meltdown) that affect AMD, ARM, and Intel CPUs to varying degrees. If you haven’t had a chance to learn about these issues, we recommend watching The Case of Spectre and Meltdown by the team at TU Graz from BlueHat Israel, reading the blog post by Jann Horn (@tehjh) of Google Project Zero, or reading the FOSDEM 2018 presentation by Jon Masters of Red Hat.
Speculative Execution Bounty Launch
Wednesday, March 14, 2018
Today, Microsoft is announcing the launch of a limited-time bounty program for speculative execution side channel vulnerabilities. This new class of vulnerabilities was disclosed in January 2018 and represented a major advancement in the research in this field. In recognition of that threat environment change, we are launching a bounty program to encourage research into the new class of vulnerability and the mitigations Microsoft has put in place to help mitigate this class of issues.
2018 年 3 月のセキュリティ更新プログラム (月例)
Tuesday, March 13, 2018
2018 年 3 月 14 日 (日本時間)、マイクロソフトは以下のソフトウェアのセキュリティ更新プログラムを公開しまし
March 2018 security update release
Tuesday, March 13, 2018
Today, we released security updates to provide additional protections against malicious attackers. By default, Windows 10 receives these updates automatically, and for customers running previous versions, we recommend they turn on automatic updates as a best practice. More information about this month’s security updates can be found in the Security Update Guide.
Petya や WannaCrypt などのラピッド サイバー攻撃を緩和する方法
Monday, March 05, 2018
本記事は、Microsoft Secure ブログ “How to mitigate rapid cyberattacks such as Petya and WannaCrypt” (2018 年 2 月 21 日 米国時
ラピッド サイバー攻撃の一種、Petya の概要
Friday, February 23, 2018
本記事は、Microsoft Secure ブログ “Overview of Petya, a rapid cyberattack” (2018 年 2 月 5 日 米
セキュリティ更新プログラムの情報を API で取得する方法を紹介するビデオを YouTube で公開しています
Thursday, February 15, 2018
セキュリティ更新プログラムの情報は「セキュリティ更新プログラム ガイド」ダッシュボードから入手できるこ
Inside the MSRC– The Monthly Security Update Releases
Wednesday, February 14, 2018
For the second in this series of blog entries we want to look into which vulnerability reports make it into the monthly release cadence. It may help to start with some history. In September 2003 we made a change from a release anytime approach to a mostly predictable, monthly release cadence.
急速に広がるサイバー攻撃「ラピッド サイバー攻撃」の概要
Wednesday, February 14, 2018
本記事は、Microsoft Secure ブログ “Overview of rapid cyberattacks” (2018 年 1 月 23 日 米国