Looks like you're enjoying the discussion, but you're not signed up for an account. When you create an account, we remember exactly what you've read, so you always come right back where you left off. You also get notifications, here and via email, whenever new posts are made. You can like posts to share the love. 
Join 
FYI...
- https://technet.micr...curity/ms16-oct
Oct 11, 2016 - "This bulletin summary lists security bulletins released for October 2016...
Microsoft Security Bulletin MS16-118 - Critical
Cumulative Security Update for Internet Explorer (3192887)
- https://technet.micr...curity/MS16-118
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Internet Explorer
Microsoft Security Bulletin MS16-119 - Critical
Cumulative Security Update for Microsoft Edge (3192890)
- https://technet.micr...curity/MS16-119
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Microsoft Edge
Microsoft Security Bulletin MS16-120 - Critical
Security Update for Microsoft Graphics Component (3192884)
- https://technet.micr...curity/MS16-120
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Microsoft .NET Framework, Microsoft Office, Skype for Business, and Microsoft Lync.
Microsoft Security Bulletin MS16-121 - Important
Security Update for Microsoft Office (3194063)
- https://technet.micr...curity/MS16-121
Important - Remote Code Execution - May require restart - Microsoft Office, Microsoft Office Services and Web Apps
Microsoft Security Bulletin MS16-122 - Critical
Security Update for Microsoft Video Control (3195360)
- https://technet.micr...curity/MS16-122
Critical - Remote Code Execution - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-123 - Important
Security Update for Windows Kernel-Mode Drivers (3192892)
- https://technet.micr...curity/MS16-123
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-124 - Important
Security Update for Windows Registry (3193227)
- https://technet.micr...curity/MS16-124
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-125 - Important
Security Update for Diagnostics Hub (3193229)
- https://technet.micr...curity/MS16-125
Important - Elevation of Privilege - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-126 - Moderate
Security Update for Microsoft Internet Messaging API (3196067)
- https://technet.micr...curity/MS16-126
Moderate - Information Disclosure - Requires restart - Microsoft Windows
Microsoft Security Bulletin MS16-127 - Critical
Security Update for Adobe Flash Player (3194343)
- https://technet.micr...curity/MS16-127
Critical - Remote Code Execution - Requires restart - Microsoft Windows, Adobe Flash Player
___
Re-released:
Compatibility update for keeping Windows up-to-date in Windows 7
- https://support.micr...n-us/kb/2952664
"This update performs diagnostics on the Windows systems that participate in the Windows Customer Experience Improvement Program. The diagnostics evaluate compatibility on the Windows ecosystem and help Microsoft to ensure application and device compatibility for all updates to Windows. There is no GWX or upgrade functionality contained in this update..."
Last Review: 10/11/2016 16:06:00 - Rev. 27.0
Applies to: Windows 7 Service Pack 1
___
MS16-118: http://www.securityt....com/id/1036992
MS16-119: http://www.securityt....com/id/1036993
MS16-120: http://www.securityt....com/id/1036988
MS16-121: http://www.securityt....com/id/1036984
MS16-122: http://www.securityt....com/id/1036983
MS16-123: http://www.securityt....com/id/1036996
MS16-124:
MS16-125: http://www.securityt....com/id/1036997
MS16-126:
MS16-127: http://www.securityt....com/id/1036985
___
- https://blogs.techne...update-release/
Oct 11, 2016
Oct 2016 Office Update Release
- https://blogs.techne...update-release/
Oct 11, 2016 - "... This month, there are -16- security updates (2 bulletins) and 32 non-security updates.
Security bulletins:
MS16-120: https://technet.micr...y/ms16-120.aspx
MS16-121: https://technet.micr...y/ms16-121.aspx
All of the security and non-security updates for October are listed in KB article 3194160:
- https://support.micr...n-us/kb/3194160
A new version of Office 2013 Click-To-Run is available: 15.0.4867.1003
A new version of Office 2010 Click-To-Run is available: 14.0.7174.5001
For information on Office 365 Click-To-Run updates, see Office 365 client update branch releases*."
* https://technet.micr.../en-us/mt465751
.NET Framework Monthly Rollups Explained
- https://blogs.msdn.m...lups-explained/
Oct 11, 2016
___
ISC Analysis: https://isc.sans.edu...l?storyid=21581
2016-10-11 - "Microsoft published -nine- bulletins plus one bulletin affecting Adobe Flash. These bulletins fix 43 vulnerabilities in Microsoft software, and 11 in Flash. Several of the bulletins address vulnerabilities that are already exploited in the wild. Most of these vulnerabilities are information disclosure vulnerabilities. One of them, CVE 2016-3393 is a remote code execution vulnerability which is why I labeled it as "Patch Now"... summary here:
- https://isc.sans.edu...wday=2016-10-11 "
Qualys Analysis: https://blog.qualys....ive-0-day-fixes
Oct 11, 2016 - "Today Microsoft started rolling out a new way to patch systems, and I explain the different components which are included and their timeline:
> Patch Tuesday (second Tuesday of every month or B week): Two main components will be released on Patch Tuesday:
- A security-only update: This is a single update containing all new security fixes for that month. It will be released on Windows Server Update Services (WSUS) where it can be consumed by other tools like ConfigMgr, and the Windows Update Catalog. This package will NOT be available for consumer PCs which get updated via Windows Update.
- A security monthly rollup: A single update containing all new security fixes for that month (same as the security-only update) as well as fixes from all previous monthly rollups. This will be available for consumer PCs which get updated via Windows Update.
> Third Tuesday of every month (C Week): This is a monthly rollup containing a preview of new non-security fixes that will be included in the next monthly rollup, as well as fixes from all previous monthly rollup. This is included for users to test their systems before next month. This will be available on WSUS, Windows update and Windows Update Catalog.
Internet Explorer updates are included in the security-only -and- monthly security rollup. .NET will follow a similar formula as monthly rollup and security-only updates.
Since today is Patch Tuesday i.e. B week or second Tuesday week, here is a list of security fixes that administrators should focus on:
A total of ten security updates were released affecting Browsers, Office, GDI, Kernel Drivers, Registry, Messaging and also update for Adobe Flash. Five updates are critical, four are important while one is moderate. What’s interesting is that five updated have at least one vulnerability each which a fixes a 0-day. These are the vulnerabilities that are already actively exploited in the wild..."
.
Edited by AplusWebMaster, 12 October 2016 - 03:56 AM.
