msrc

July 2012 Security Bulletin Webcast, Q&A, and Slide Deck

Friday, July 13, 2012

Today we published the July Security Bulletin Webcast Questions & Answers page, and the July 2012 Security Bulletin Release Webcast slide deck. We fielded 15 questions on various topics during the webcast, including bulletins and advisory details, deployment questions, and plans for later updates. We also received a question that we weren’t able to tackle in the allotted time; we’ve answered that one in the Q&A as well.

• Security Bulletin Webcast

Gadgets, certificate housekeeping and the July 2012 bulletins

Tuesday, July 10, 2012

Before we dive into the July security updates, let’s change up the normal order and take a look at the two Security Advisories we are releasing today. One takes an exciting step into the future, while the other prepares us to take an equally important step away from the past.

• Internet Explorer (IE)
• Security Bulletin
• Security bulletin release

Advance Notification Service for July 2012 Security Bulletin Release

Thursday, July 05, 2012

Hello – As per our usual cadence, today we’re releasing our advance notification for this month’s security bulletin release, which is scheduled for Tuesday, July 10. The July release includes nine bulletins addressing 16 vulnerabilities in Microsoft Windows, Microsoft Office, Internet Explorer, and Visual Basic for Applications. We will release all nine bulletins on Tuesday at approximately 10 a.

• ANS

BlueHat Prize: And the finalists are...

Thursday, June 21, 2012

Hello, The judges have finished reviewing the submissions for the first BlueHat Prize contest and the finalists are in! Please visit www.BlueHatPrize.com for details on the three finalists and their entries that mitigate return-oriented programming (ROP). The finalists will collectively be awarded over a quarter million dollars in cash and prizes at the Microsoft Researcher Appreciation Party following the Black Hat briefings in Las Vegas on July 26, 2012.

June 2012 Security Bulletin Webcast, Q&A, and Slide Deck

Friday, June 15, 2012

Hello, Today we published the June Security Bulletin Webcast Questions & Answers page, and the June 2012 Security Bulletin Release Webcast slide deck. We fielded 23 questions on various topics during the webcast, including bulletins released, deployment tools, and update detection tools. Our webcast from Wednesday is now available for on-demand viewing.

• Security
• Update Tuesday
• Webcast

Further insight into Security Advisory 2719615

Wednesday, June 13, 2012

During our regular Update Tuesday bulletin cycle this week, we released Security Advisory 2719615, which provides guidance concerning a remote code execution issue affecting MSXML Code Services. As part of that Advisory, we’ve built a Fix it workaround that blocks the potential attack vector in Internet Explorer. Fix its are a labor-saving mechanism that helps protect customers from a specific issue in advance of a comprehensive security update.

• Advisory
• Security Advisory

Certificate Trust List update and the June 2012 bulletins

Tuesday, June 12, 2012

For Update Tuesday we’re releasing seven security bulletins – three Critical-class and four Important – addressing 26 unique CVEs to further improve the security postures of Microsoft Windows, Internet Explorer, Dynamics AX, Microsoft Lync, and the Microsoft .NET Framework. In addition to the security bulletins, we are releasing an automatic updater feature for Windows Vista and Windows 7 untrusted certificates.

• Security Advisory
• Security Bulletin
• Security bulletin release
• Update Tuesday

Advance Notification Service for June 2012 Security Bulletin Release

Thursday, June 07, 2012

Hello – Today we’re releasing our advance notification for the June security bulletin release, which is scheduled for Tuesday, June 12. This month’s release includes 7 bulletins addressing 25 vulnerabilities in Microsoft Windows, Internet Explorer, Visual Basic for Applications, Dynamics AX, and the .NET Framework. All seven bulletins will be released on Tuesday at approximately 10 a.

• ANS
• Internet Explorer (IE)
• Security

Security Advisory 2718704: Collision attack details, WU update rollout

Wednesday, June 06, 2012

Today, as a part of our continuing phased mitigation strategy recently discussed, we have initiated the additional hardening of Windows Update. We’ve also provided more information about the MD5 hash-collision attacks used by the Flame malware in the SRD blog. This information should help answer questions from customers about the nature of these collision attacks.

• Security Advisory

Security Advisory 2718704: Update to Phased Mitigation Strategy

Monday, June 04, 2012

Hello, At Microsoft, our commitment is to help ensure customer trust in their computing experience. That was the impetus for Trustworthy Computing, and central to that is the priority we place on taking the necessary actions to help protect our customers. Yesterday, we issued Security Advisory 2718704 outlining the steps we took to help protect our customers from attacks using certain unauthorized digital certificates.

• Security Advisory