Newsletter Archives

• CentOS dead

  Posted on December 10, 2020 at 21:07 CST by Susan Bradley • Comment in the Forums

  Right on the same day as Patch Tuesday CentOS and RedHat notified everyone that they are shutting down CentOS.

  What is disturbing about this is how EARLY the end of life came.  I remember when CentOS was touted as being a potential replacement for Small Business Server.

  Anyone using this in their businesses?  Were you surprised?

  Enterprise Patch Lady Posts

• HP Issues Sure Click Enterprise 4.2 Patch 1 to fix Initialization Failures caused by Windows Updates (October 2020)

  Posted on October 16, 2020 at 10:34 CDT by PKCano • Comment in the Forums

  Posted on October 15, 2020, HP announced the release of HP Sure Click Enterprise 4.4 Patch 1 and Bromium Secure Platform 4.1 Update 8 (Patch 5) to fix Initialization failures caused by October 2020 Windows Updates.
  

  Issue Description

  After installing any of the referenced Windows Update KBs below, HP Sure Click Enterprise and Bromium Secure Platform will be unable to successfully initialize. New initialization attempts will fail with error UPDATEGUEST_NETWORK_SETUP_FAIL. Your devices will continue to work until a new initialization is needed, giving you additional time to rollback the Microsoft KBs. New initialization requests would generally be caused by:

  • Upgrading supported applications to a new major version, such as Chrome, Microsoft Office or Adobe Reader.

  • Manually requesting a new initialization from the Desktop Console

  • Installing a new version of HP Sure Click Enterprise

  This is a list of the Windows Updates affected

  • KB4579311 – Windows 10 Version 2004 x64
  • KB4577671 – Windows 10 Version 1903 x64
  • KB4577671 – Windows 10 Version 1909 x64
  • KB4577668 – Windows 10 Version 1809 x64
  • KB4580330 – Windows 10 Version 1803 x64
  • KB4580328 – Windows 10 Version 1709 x64
  • KB4580346 – Windows 10 Version 1607 x64
  • KB4580327 – Windows 10 RTM x6

  HP Sure Click Enterprise 4.2 Patch 1 Released.

  According to Windows Central

  There’s HP Sure Click Enterprise. HP calls this the “world’s most secure endpoint application isolation and containment solution.” Supported on Windows 8 and Windows 10, Sure Click Enterprise brings enhanced run-time protection with non-persistent virtual machines. It can also protect user credentials from phishing attacks and supports large-scale deployments.
  

  Gunter Born has more details on Born’s Tech and Windows World.

  Enterprise, Small Business Computing, Windows Patches/Security HP Sure Click Enterprise, Windows 10

• Patch Lady – out of band coming?

  Posted on September 24, 2019 at 11:11 CDT by Susan Bradley • Comment in the Forums

  Microsoft apparently has informed it’s Enterprise customers that the out of band Internet Explorer update will be on Microsoft update and WSUS today.  (thank you Microsoft for making me feel that you only care about Enterprises and do not inform the masses of your decisions on security).

  One thing I keep seeing said over and over again is “Oh if you don’t use IE don’t worry”.

  Uh, not so fast.  In the Security bulletin info “In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Internet Explorer and then convince a user to view the website, for example, by sending an email.”

  Code can be used to specifically call one browser versus another.  Case in point, I may not have IE as my default but QuickBooks still uses it under the hood.  So the idea that you are safe just because you don’t use X… when these days MOST of our attacks are phishing/email based attacks is just not wise.

  I’m still waiting to see if the Surface RT devices will get their browser patch fix.  They have few options, are still broken, the September patch is still being pushed to them, and no one from Microsoft is giving an eta for a fix.

  Susan update:  The out of bands are included in the optional preview updates.  That’s not “out of band” in my book.  The Surface RT devices did get their fix.

  Enterprise, Windows Patches/Security Patch Lady Posts