This month’s patches a real yawner

They’re out. As expected, Microsoft released two Security Bulletins, and they’re both a bit less than compelling.

MS10-030 applies to Outlook Express (XP and earlier) and Windows Mail (Vista). If you’ve already upgraded to Windows Live Mail – and you should, you know – there’s a very tiny exposure, but nothing worth sweating about.

MS10-031 only applies to people running applications made with Visual Basic for Applications. Even if you have VBA going on your PC, there aren’t any known exploits.

You’ll want to patch some day, but for now, let the other folks get the arrows in their backs.

MS-DEFCON 2: Make sure automatic updates is turned off

With Microsoft’s Black Tuesday patches just around the corner, this would be a good time to make sure you have automatic updates turned off.

We’re expecting two Security Bulletins, affecting just about everything under the sun (well, OK,Windows and Office). All we really know for sure at this point is that the bulletin’s won’t address the SharePoint XSS Scripting 0day that’s been making the rounds.