Patch Tuesday--let the attacks begin

TalkBack 21 of 55:

Next »

« Previous

• Thread View
• Flat View

Mentioned that alternative in the original post.

But the idea that malware writers wait until the day after patch issuance to escape a fix from Microsoft for a slightly longer period did not seem compelling to me.
Could be correct, just not immediately compelling.

An idea published in ZDNet previously is that malware writers study patches to find vulnerabilities, and then use the information to attack unpatched pc's.
That seemed more compelling to me.


Anyway, the problems with unrelated malware releases after patch include:
- AV companies identify and respond to a new outbreak before Microsoft could issue a patch, so concentrating on patching dates seems inefficient, and
- if the malware were issued a day, a week, even two weeks before the patch date and the vulnerability required effort to solve, the chances of hitting the scheduled patch date are low. And then the malware writer gets the advantage of the following full month.

If patch date were the main issue, malware writers would be trying to issue as much before a patch date as they felt they safely could.

Posted by: Anton Philidor   Posted on: 07/26/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now