MS-DEFCON 2: Turn off Windows Automatic Update

Once again, Microsoft’s Black Tuesday patches cover a lot of ground, with 26 separately identified security holes getting plugged.

The SANS Internet Storm Center advises that none of the patched problems is currently being exploited, although Microsoft says there are targeted attacks for MS12-060, but nobody has yet successfully pulled off an attack using that particular vulnerability. (“Targeted” is the buzzword for “aimed at specific businesses or political organizations.”)

Time to make sure Microsoft/Windows Automatic Update is turned off.

I’m moving us up to MS-DECONF 2: Patch reliability is unclear. Unless you have an immediate, pressing need to install a specific patch, don’t do it.

Let’s let the cannon fodder see if they can flush out any problems with the patches.