Patch Tuesday--let the attacks begin

TalkBack 29 of 55:

Next »

« Previous

• Thread View
• Flat View

The problem isn't having a regular patching cycle.

Much is being made of "Patch Tuesday", but as I see it the problem isn't bundling up all of the "standard" patches for release once a month, but instead:

1) Failing to patch a known issue (not currently being exploited) in a timely manner. To the extent that MS is guilty of this, I don't think the extra two weeks (on average) that a monthly patch cycle introduces is the real problem.

2) MS's reluctance to issue an off cycle patch for zero day exploits or serious vulnerabilities for which proof of concept code exists.

The Blog doesn't come out and say this, but I think item 2 is what he is really talking about. Waiting until the day after the monthly patches are released only gives the black hats an advantage if they can predict that MS won't issue an off cycle patch. This is of course the same point George Ou made in a separate blog very recently.

Posted by: enduser_z   Posted on: 07/25/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Driving Business Agility through SOA Connectivity & Integration Whitepaper from IBM IBM In this whitepaper, you will learn how to work smarter so you can solve ... Download Now
• VMware Infrastructure: A Guide to Bottom-Line Benefits VMware Frustrated by the costs of maintain ever larger data centers?or building ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now