• MS-DEFCON 5: Time to get patched

    Microsoft’s record-breaking bunch of patches in August seem to me to be ready for prime time. Even the .NET patch looks well-behaved.

    There have been a lot of minor changes in the documentation surrounding the patches, but by and large I haven’t heard any major screams of pain. That’s remarkable, not just because of the .NET patch – .NET patches always cause massive headaches – but also because of the huge Internet Explorer roll-up.

    Of course, the one big gaping known security hole in Windows, the DLL hijacking vulnerability, remains unpatched and intractable. More about that shortly.

    I’m moving us down to MS-DEFCON 5: All’s clear. Patch while it’s safe. And while you’re at it, make sure you understand my recommendations about defending yourself against the DLL hijacking mess, as described in my Infoworld Tech Watch articles.