Posted on June 12th, 2012 at 10:34 4 comments
We have a huge bunch of patches coming: seven security bulletins patching 25 separately identified holes.
In addition, Microsoft is, uh, patching the patcher. In other words, Windows Update Services itself will be patched – in response to the amazing revelations about Flame and subverted root certificates.
Bottom line: now’s a good time to make sure you have Windows (and Microsoft) Automatic Update turned OFF.
I’m moving us up to MS-DEFCON 2: Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don’t do it.