MS-DEFCON 2: Make sure your auto updates are locked down

We have a huge bunch of patches coming: seven security bulletins patching 25 separately identified holes.

In addition, Microsoft is, uh, patching the patcher. In other words, Windows Update Services itself will be patched – in response to the amazing revelations about Flame and subverted root certificates.

Bottom line: now’s a good time to make sure you have Windows (and Microsoft) Automatic Update turned OFF.

I’m moving us up to MS-DEFCON 2: Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don’t do it.