Two citical updates for Windows released
MS15-056 updated Internet Explorer and fixed 24 vulnerabilities by “preventing browser histories from being accessed by a malicious site,” as well as “adding additional permission validations to Internet Explorer [and] modifying how Internet Explorer handles objects in memory,” the release said, noting that “customers whose accounts are configured to have fewer user rights on the system could be less impacted than those who operate with administrative user rights.
MS15-057 plugged a hole in Windows with which attackers could seize control remotely of a system if Windows Media Player “opens specially crafted media content that is hosted on a malicious website.”
These patches should be installed on all systems and are available from Windows Update. Inaddition to these Microsoft has released six non-critical updates.
Windows 10 releasing on July 29
Microsoft revealed this morning that Windows 10 will be released to customers on July 29, 2015 as part of a free upgrade offer and with new PCs. This date is when the free upgrade promotion for one year begins.
Microsoft has also started deploying a software-based reservation system so that current Windows users can automatically register to receive the free update on their existing PCs.
Starting today users of eligible systems will start seeing an Icon in the taskbar of Windows 7 and * workstations.
We DO NOT recommend anyone who uses their PC for business applications sign up for this program. It is imperative that your business critical applications be tested prior to migrating to Windows 10. If you do reserve your copy now your system will automatically download a 3GB setup at some point prior to July 29.
Microsoft Patch Tuesday: Fourteen Security patches
Microsoft issued 14 security bulletins for March 2015, five of which are rated as critical. Among them is the security fix for FREAK (also known as the Factoring Attack on RSA-EXPORT Keys vulnerability or CVE-2015-0204) is the latest flaw to be found in SSL/TLS, and could allow unauthorized parties – such as malicious hackers or intelligence agencies – to spy upon your secure internet communications.
Source: Microsoft
You can now install a “clean” version of windows on a machine purchased through a retailer
If you have purchased a Laptop or Desktop with Windows installed in the last ten years you have probably received this machine with not only Microsoft Windows preinstalled but with a host of other software as well. Usually McAfee, Symantec or other Antivirus trials and any number of obscure or well known type software you probably never use.
New PC users either spent the first two hours with their new machine uninstalling this unwanted software or they simply leave it there in many cases using resources that are better utilized by software they are using.
The reason for this preinstalled software of course is financial. The margins of PCs has been moving steadily down and PC makers (Dell, HP, Acer etc) install this software not as a favor to these software providers but as a source of alternative revenue.
Microsoft has now released the software so that users of retail PCs can download “clean” installation media to allow you to wipe away the original installation and install your retail version of Microsoft Windows. There are some caveats of course. You must have the retail Key and it is not supported for Enterprise licenses. The links to the pages for supported operating systems are below:
Security updates available for Adobe Flash Player on Mac, Windows and Linux
Adobe has released a patch for its Flash player and recommends you download the updated versions from their download center.
Source: Adobe
January Patch Tuesday includes critical patch for telnet
A Vulnerability in Windows User Profile Service Could Allow Elevation of Privilege. All clients should ensure their systems are patched tonight.
Source: Microsoft Support