Jump to content

Build Theme!
  •  
  • Infected?

WE'RE SURE THAT YOU'LL LOVE US!

Hey there! :wub: Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. :D Join 93098 other members! Anybody can ask, anybody can answer. Consistently helpful members may be invited to become staff. Here's how it works. Virus cleanup? Start here -> Malware Removal Forum.

Try What the Tech -- It's free!


Photo

MS Security Bulletin Summary - January 2016


  • Please log in to reply
9 replies to this topic

#1 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 12 January 2016 - 12:59 PM

FYI...

- https://technet.micr...curity/ms16-jan
Jan 12, 2016 - "This bulletin summary lists security bulletins released for January 2016...
(Total of -9-)

Microsoft Security Bulletin MS16-001 - Critical
Cumulative Security Update for Internet Explorer (3124903)
- https://technet.micr...curity/MS16-001
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Internet Explorer
- https://support.micr...n-us/kb/3124903
Last Review: 01/12/2016 18:35:00 - Rev: 1.0
Applies to:
    Internet Explorer 11
    Internet Explorer 10
    Windows Internet Explorer 9
    Windows Internet Explorer 8
    Windows Internet Explorer 7

 

Microsoft Security Bulletin MS16-002 - Critical
Cumulative Security Update for Microsoft Edge (3124904)
- https://technet.micr...curity/MS16-002
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Microsoft Edge

Microsoft Security Bulletin MS16-003 - Critical
Cumulative Security Update for JScript and VBScript to Address Remote Code Execution (3125540)
- https://technet.micr...curity/MS16-003
Critical - Remote Code Execution - May require restart - Microsoft Windows

Microsoft Security Bulletin MS16-004 - Critical
Security Update for Microsoft Office to Address Remote Code Execution (3124585)
- https://technet.micr...curity/MS16-004
Critical - Remote Code Execution - May require restart - Microsoft Office, Visual Basic

Microsoft Security Bulletin MS16-005 - Critical
Security Update for Windows Kernel-Mode Drivers to Address Remote Code Execution (3124584)
- https://technet.micr...curity/MS16-005
Critical - Remote Code Execution - Requires restart - Microsoft Windows

Microsoft Security Bulletin MS16-006 - Critical
Security Update for Silverlight to Address Remote Code Execution (3126036)
- https://technet.micr...curity/MS16-006
Critical - Remote Code Execution - Does not require a restart - Microsoft Silverlight

Microsoft Security Bulletin MS16-007 - Important
Security Update for Microsoft Windows to Address Remote Code Execution (3124901)
- https://technet.micr...curity/MS16-007
Important - Remote Code Execution - Requires restart - Microsoft Windows

Microsoft Security Bulletin MS16-008 - Important
Security Update for Windows Kernel to Address Elevation of Privilege (3124605)
- https://technet.micr...curity/MS16-008
Important - Elevation of Privilege - Requires restart - Microsoft Windows

Microsoft Security Bulletin MS16-010 - Important
Security Update in Microsoft Exchange Server to Address Spoofing (3124557)
- https://technet.micr...curity/MS16-010
Important - Spoofing - May require restart - Microsoft Exchange Server
___

MS16-001: http://www.securityt....com/id/1034648
MS16-002: http://www.securityt....com/id/1034649
MS16-003: http://www.securityt....com/id/1034650
MS16-004: http://www.securityt....com/id/1034651
- http://www.securityt....com/id/1034652
- http://www.securityt....com/id/1034653
MS16-005: http://www.securityt....com/id/1034654
MS16-006: http://www.securityt....com/id/1034655
MS16-007: http://www.securityt....com/id/1034659
- http://www.securityt....com/id/1034660
- http://www.securityt....com/id/1034661
MS16-008: http://www.securityt....com/id/1034645
MS16-010: http://www.securityt....com/id/1034647
___

- http://blogs.technet...se-summary.aspx
12 Jan 2016

Security Advisories 2016
- https://technet.micr...y/mt631688.aspx
Jan 12, 2016
    
Microsoft Security Advisory 3123479
Deprecation of SHA-1 Hashing Algorithm for Microsoft Root Certificate Program
- https://technet.micr...ty/3123479.aspx
    
Updates for ActiveX Kill Bits 3118753
- https://technet.micr...ty/3118753.aspx

Microsoft Security Advisory 3109853
Update to Improve TLS Session Resumption Interoperability
- https://technet.micr...ty/3109853.aspx
___

January 2016 Office Update Release
- http://blogs.technet...te-release.aspx
12 Jan 2016 - "... there are 29 security updates (1 bulletin) and 36 non-security updates.
Security bulletins: MS16-004:
- https://technet.micr...curity/MS16-004 "
____

ISC Analysis
- https://isc.sans.edu...l?storyid=20605
2016-01-12

>> http://blog.shavlik....016-summary.jpg

.


Edited by AplusWebMaster, 14 January 2016 - 02:14 PM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.

    Advertisements

Register to Remove


#2 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 15 January 2016 - 09:43 AM

FYI...

More new 'Win10 nagware' appears on Win7 machines ...

Compatibility update for upgrading Windows 7
> https://support.micr...n-us/kb/2952664
Last Review: 01/12/2016 18:34:00 - Rev: 16.0

If you don't want it, on your "Recommended updates" list, right click it and choose "Hide".
___

- http://www.infoworld...and-81-pcs.html
Jan 14, 2016
 

:ph34r: :ph34r:


Edited by AplusWebMaster, 15 January 2016 - 10:28 AM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#3 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 16 January 2016 - 11:49 AM

FYI...

MS: Only the Latest Version of Windows Will Support New CPU Generations
- http://tech.slashdot...cpu-generations
Jan 16, 2016 - "... news from Microsoft about how the company will support Windows now and in the future*. The company says PCs built with Intel's Skylake chip, and other new architectures in the future, will require the latest version of Windows for support. This doesn't take effect right away; Windows 7 and 8.1 will be supported on older chips until their planned end-of-life dates, in 2020 and 2023 respectively. They'll also be supported on a list of current Skylake devices for the next 18 months. After that, only the latest version of Windows will support integration** between the operating system and new CPU features. "For example, Windows 10 will be the only supported Windows platform on Intel's upcoming 'Kaby Lake' silicon, Qualcomm's upcoming '8996' silicon, and AMD's upcoming 'Bristol Ridge' silicon..."

* https://blogs.window...con-innovation/
Jan 15, 2016
** http://www.zdnet.com...ire-windows-10/
Jan 15, 2016
 

:ph34r: :ph34r:


.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#4 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 20 January 2016 - 10:29 AM

FYI...

Deadline for obsolete IE's and Win8
- http://windowssecret...-and-windows-8/
Jan 14, 2016 - "With the start of a new year, Microsoft is cleaning house of “obsolete” operating systems and browsers. If you’re still on Windows 8.0, you need to update to Win8.1 to be fully supported. And for true browser protection, you need to be using the most current releases of Internet Explorer...
MS16-001 (3124275), MS16-003 (3124624)
... reducing the number of versions Microsoft needs to support is a good thing. For example, keeping secure a browser that has multiple editions in multiple languages, for multiple operating systems is a tall order, even for Microsoft. Sending out monthly fixes for fewer versions should mean more reliable updates.
With that in mind, this month’s cumulative IE update, KB 3124903, is the -last- for IE 7 and 8. According to a Microsoft product lifecycle FAQ*, “Beginning Jan. 12, 2016, only the most current version of Internet Explorer available for a supported operating system will receive technical support and security updates.” Going forward, on desktop Windows, IE 9 will be the -only- supported version on Vista systems; IE 11 is the -only- supported version on Win7 and Win8.1.
Along with the operating system and your malware software, the browser is the most important app to keep up to date with the latest security fixes. If you remain on IE 7 or 8, your risk of infection will rise rapidly. Keep in mind that Internet Explorer is deeply tied into Windows. So even if you don’t use IE as your default browser, it’s important to keep it current. (After you install this month’s cumulative update, you’ll be -nagged- that your browser is out of date and you need to upgrade — in most cases to IE 11.)"
* https://support.micr...ternet-Explorer
___

Outlook 2010 Update KB3114570 introduces a regression error
See here:
- https://answers.micr...f5-00895e4f5535

And here:
- http://www.infoworld...endar-bugs.html
___

Update that supports Azerbaijani Manat and Georgian Lari currency symbols in Windows Re-released?
- https://support.micr...n-us/kb/3102429
Last Review: 01/19/2016 19:40:00 - Rev: 7.0

... may cause:
Windows Update KB3102429 Does not play well with Crystal Reports for Visual Studio 2008
- https://answers.micr...3?page=2&auth=1
 

:ph34r: :ph34r:


Edited by AplusWebMaster, 20 January 2016 - 03:59 PM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#5 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 26 January 2016 - 04:41 AM

FYI...

Error launching Office applications after January updates
- http://blogs.technet...ry-updates.aspx
25 Jan 2016 - "It's been reported that after applying January 2016 update (KB 3114506*), customers are experiencing an error on Windows Server 2012 R2 and Windows Server 2008 R2 when trying to launch Office applications such as Excel, PowerPoint and OneDrive for Business. Error Examples:
System Error - The program can’t start because davclnt.dll is missing from your computer. Try reinstalling the program to fix this problem. Excel application error:  
> http://blogs.technet...-Screenshot.PNG
RESOLUTION: Currently, Microsoft is working on the issue and will be providing an update when a fix becomes available. As a workaround, install Desktop User Experience, which ensures the davclnt is available.
Follow this article for further information and updates:
Error: The Program can’t start because davclnt.dll is missing from your computer
- https://community.of.../f/172/t/427963 "

Update for Office 2013 (KB3114506)
* https://support.micr...n-us/kb/3114506
Last Review: 01/26/2016 09:05:00 - Rev: 3.0

Tags: Excel 2013, powerpoint 2013, Office 2013, davclnt
 

:ph34r:


Edited by AplusWebMaster, 26 January 2016 - 04:43 AM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#6 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 27 January 2016 - 08:38 AM

FYI...

MS16-004 replaces mscomctl.ocx and causes incompatibility errors...
- https://social.techn...ceitproprevious
January 18, 2016 8:37AM / (See: January 26, 2016 7:27AM entry)
___

Regression error in Microsoft Outlook 2010 Update KB3114570
- https://answers.micr...5e4f5535?auth=1
Jan 13-21, 2016 ...

RE: https://support.micr...n-us/kb/3114570
Last Review: 01/12/2016 17:40:00 - Rev: 1.0
Applies to:
    MS Office 2010 SP2
 

:ph34r: :ph34r:


Edited by AplusWebMaster, 27 January 2016 - 08:50 AM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#7 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 30 January 2016 - 07:08 AM

FYI...

MS16-004 - buggy??
>> http://www.infoworld...ion-errors.html
Jan 27, 2016 - "Microsoft released MS16-004 on Jan. 12, and weird Visual Basic 6, VBA, and SharePoint 2013 errors have followed in its wake... symptoms are many and varied, but all seem to be due to a problematic new version of the MSComctLib.ocx common control library for VB6 and VBA. It looks like the new version, 6.01.9846, saves templates that don't work properly on machines with older versions of MSComctLib.ocx. It's not clear to me if those same templates throw errors when run on some machines with the new version of MSComctLib.ocx... Microsoft hasn't come up with any warnings in the KB articles..."
[ The update has a different title / KB # -depending- on the version of Microsoft Office you have installed... ]
Office 2007 (KB3114541): https://support.micr...n-us/kb/3114541
Office 2010 (KB2881029): https://support.micr...n-us/kb/2881029
Office 2013 (KB3039794): https://support.micr...n-us/kb/3039794
Office 2016 (KB2920727): https://support.micr...n-us/kb/2920727
___

- http://blogs.technet...te-release.aspx
12 Jan 2016
 

:ph34r: :ph34r:


Edited by AplusWebMaster, 30 January 2016 - 10:23 AM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#8 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 01 February 2016 - 08:59 AM

FYI...

Win10 - check your 'System Protection' setting ...
- https://isc.sans.edu...l?storyid=20675
2016-01-31 - "... Many of you (may have) upgraded to Windows 10 and it would be a good idea to verify your settings to make sure 'System Protection' is enabled:
> https://isc.sans.edu...tection_off.PNG
Here is how to check and if necessary, 'enable' System Protection:
Select [Win10 Start] -> Settings -> About -> System info -> System Protection -> Configure
Select 'Turn on system protection' to -enable- System Restore and some disk space (i.e. 10 GB):
> https://isc.sans.edu...off_default.PNG
Over the years, 'System Protection' has been in many cases a useful tool especially when installing failed patches or applications to be able to go back to an earlier and stable version."
 

:ph34r: :ph34r:


.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#9 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 03 February 2016 - 07:29 AM

FYI...

MS - renewed push to force users onto Win10
- http://www.infoworld...windows-10.html
Feb 2, 2016 - "A cryptic post from Microsoft seems to indicate that Redmond has stepped up its push to upgrade Windows 7 and Windows 8.1 users by moving Windows 10 to 'recommended status'. According to ZDNet's Mary Jo Foley*, about 5 p.m. ET on Monday, Microsoft dropped a small bombshell:
'    As we shared in late October on the Windows Blog, we are committed to making it easy for our Windows 7 and Windows 8.1 customers to upgrade to Windows 10. We updated the upgrade experience today to help our customers...'. Shortly after, Microsoft maven Paul Thurrott** confirmed the message. Apparently this is Microsoft's version of an official announcement... Until we actually see a "recommended" Windows 10 update in-the-wild, it's hard to say what Microsoft will do... your best bet is to download and run Josh Mayfield's GWX Control Panel[1]. That'll clean out the Get Windows X subsystem, reset the registry entries, and keep the hidden scheduled tasks from firing."
1] http://ultimateoutsider.com/downloads/
Version: 1.7.2.0
Jan 24, 2016
-or-
> http://ultimateoutsi...ntrol_panel.exe

MS pushes Win10 as a 'recommended' update ...
* http://www.zdnet.com...mmended-update/
Feb 1, 2016 - "... On February 1, Microsoft started making good on the promised push... Microsoft is not changing its policy of downloading part of the Windows 10 code 'proactively' to users' machines to make upgrading faster. The company is continuing to do that, in spite of complaints by many. However, unless users make the final decision to hit upgrade, Windows 10 will not completely install and replace their existing Windows versions. The "recommended" push will be a phased one, the spokesperson said, for Windows 7 and 8.1 consumers who have Automatic Updates turned on. For users who have chosen the "Give me recommended updates the same way I receive important updates" setting turned on, the automatic update process will kick off... for the record: Windows 10 is -not- a required update for Windows 7 and 8.1 users. It is now 'recommended'. Users who do not want it can just say no."
> http://www.zdnet.com...nd-at-home-too/

** https://www.thurrott...ndows-7-and-8-1
Feb 1, 2016 - "... the change from “optional” to “recommended” is somewhat controversial, since Windows Update is considered a -trusted- source for updates. That is, it will probably cause the Windows 10 upgrade to automatically start on many PCs because most users configure Windows Update to automatically install recommended updates... 'You will be assimilated'."
___

Compatibility update for upgrading Windows 7
- https://support.micr...n-us/kb/2952664
Last Review: 02/02/2016 20:42:00 - Rev: 17.0 - "This update helps Microsoft make improvements to the current operating system in order to ease the upgrade experience to the latest version of Windows..."
Applies to:
    Windows 7 SP1

Updated capabilities to upgrade Windows 8.1 and Windows 7
- https://support.micr...n-us/kb/3123862
Last Review: 02/03/2016 18:05:00 - Rev: 1.0
Applies to:
    Windows 8.1 Enterprise
    Windows 8.1 Pro
    Windows 8.1
    Windows 7 SP1

Compatibility update for Windows 8.1 and Windows 8
- https://support.micr...n-us/kb/2976978
Last Review: 02/02/2016 20:43:00 - Rev: 20.0
Applies to:
    Windows 8.1 Enterprise
    Windows 8.1
    Windows 8.1 Pro
    Windows 8 Enterprise
    Windows 8
    Windows 8 Pro

Compatibility update for Windows 7 RTM
- https://support.micr...n-us/kb/2977759
Last Review: 02/02/2016 20:42:00 - Rev: 16.0
Applies to:
    Windows 7 Enterprise
    Windows 7 Home Premium
    Windows 7 Home Basic
    Windows 7 Professional
    Windows 7 Starter
    Windows 7 Ultimate
 

:ph34r: :ph34r:


Edited by AplusWebMaster, 04 February 2016 - 11:16 AM.

.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.


#10 AplusWebMaster

AplusWebMaster

    AplusWebMaster

  • Authentic Member
  • PipPipPipPipPipPipPip
  • 10,472 posts
  • Interests:... The never-ending battle for Truth, Justice, and the American way.

Posted 08 February 2016 - 01:56 PM

FYI...

Win10 - Device Guard and Applocker
- http://blogs.msmvps....f-us-need-emet/
Feb 6, 2016 - "... security enhancements are key... the key features they are pointing out here* – Device Guard and Applocker are -not- available on the Pro or Home skus. They are -only- available on the Enterprise sku..."

Can't disable Windows Store in Win10 Pro through Group Policy
* https://support.micr...n-us/kb/3135657
Last Review: 01/29/2016 19:47:00 - Rev: 4.0 - "On a computer that's running Windows 10 Pro, you upgrade to version 1511 of Windows 10. After the upgrade, you notice that the following Group Policy settings to disable Windows Store are not applied, and you cannot disable Windows Store:
Computer Configuration>Administrative Templates>Windows Components>Store>Turn off the Store application
User Configuration>Administrative Templates>Windows Components>Store>Turn off the Store
Cause: This behavior is by design. In Windows 10 version 1511, these policies are applicable to users of the Enterprise and Education editions only..."
Applies to:
    Win10 Version 1511
 

:ph34r: :ph34r:


.The machine has no brain.
 ......... Use your own.
Browser check for updates here.
YOU need to defend against -all- vulnerabilities.
Hacks only need to find -1- to get in...
.

Related Topics



0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users