Topic: Prepare your Win 8 for first security patches... in Tuesday!

[Samker]

Windows 8's first security patches will be part of a package of fixes released Tuesday during Microsoft's monthly Patch ritual.

Microsoft announced the Windows 8 security fixes in a recent security bulletin: http://technet.microsoft.com/en-us/security/bulletin/ms12-nov

The bulletin was issued days after a security company in the business of selling zero-day vulnerabilities, Vupen, announced that it had found multiple vulnerabilities in Windows 8 and Internet Explorer 10.

Three "critical" fixes for both the 32-bit and 64-bit versions of Windows 8 will be issued on Microsoft's Patch Tuesday.

According to Microsoft, critical vulnerabilities are most severe: http://technet.microsoft.com/en-us/security/gg309177.aspx

They can be exploited to allow code execution without user interaction. Such execution allows malware to self propagate itself or code to be executed without warnings or prompts to a user.

In addition to the Windows 8 fixes, the Patch Tuesday package will include critical updates for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, Windows Server 2008 R2, Windows Server 2012 and Windows RT.

Microsoft will also be issuing a number of "important" updates for its Office productivity suite for both Windows and Mac platforms.

After Vupen revealed that it had found vulnerabilities in Windows 8, Microsoft declined to comment on the discovery.

Technologies that Vupen claim to have bypassed included HiASLR (hi-entropy Address Space Layout Randomization), AntiROP (anti-Return Oriented Program), DEP (data execution prevention) and the IE 10 Protected Mode sandbox.

Although Microsoft has made great strides in securing Windows 8 and IE 10, vulnerabilities were bound to be found, according to Bitdefender senior product manager Alex Balan.

"As with any software, things are found to be vulnerable at one point or another," he said in an interview. "It's not that Microsoft is a great company and doesn't develop great software."

"They've made huge leaps forward in terms of security," he added. "But holes are always going to be found that will allow someone to lower the security barriers. One way or the other, vulnerabilities will be exposed, and they will be exploited."

(PCW)

[Pez]

Nice article!

Allready need to patch Windows 8. But Ok normaly ther is a servicepack released within the first 6 month in a OS life cycle. But I hoped Win 8 would have been better then the need patching under the first patch round efter the realese.

The first I have seen of the release of Windows 8 with the interface is that it is more a OS for home users then company users. Let see how long it take to get large companys to mow over to Windows 8. What I suppose the most of them stay at XP or if thay have begine thay move over to Windows 7. The new interface is not a good envirament in a company pespective because of the need to train unexperence user to use the interface when it is not family with it.

[Samker]

Nice article!

...

Thanks pal. 

...

What I suppose the most of them stay at XP or if thay have begine thay move over to Windows 7.

...

Good point, it look that XP is immortal. 

[portoleone]

Let's stay relied on immortal XP