Microsoft Endpoint Configuration Manager out of band

Topic

New Reply

What is it? There is an out of band security update for Microsoft Endpoint Configuration Manager. This is a business only tool used to manage computer
[See the full post at: Microsoft Endpoint Configuration Manager out of band]

Susan Bradley Patch Lady/Prudent patcher

Reply | Quote

Replies

A exploit that has been around for 5 years is finally get patch. MS works very quikcly to fix this.

Reply | Quote

MS need to go back to school wrote:

A exploit that has been around for 5 years is finally get patch. MS works very quikcly to fix this.

Correction to your post. Exploit was around (2014 or 2015) but it was only in some circles only. It was semi public leaked 6 years ago in 2016 at MS conference and than more detail came out in 2017. Now in 2022 MS finally patch it after the tolerance level is too high.

MS tolerance level from my understanding of exploits that MS focus on.

• Very Low--Less than 1 million computers currently being exploited…no need to patch.
• Low–1-2 million…time to start preparing a story to tell the public if it get high visibility  by media and security firms
• Medium–2-4 million…Make sure there is no evident that we knew of this exploit and cover our backs if lot of paper work document that. Make sure story is good to release to the public.
• High–4-5 million … time to stop making pretty useless GUI  changes for Windows and think how to fix it but still have time to make pretty useless GUI changes since that is more important than security…no work is done to patch it.
• Very High over 5 million….time to create patch NOW NOW…patch breaks computers….time to fix it….patch breaks computers again…time to fix again…OK…might be fix time to get back to making pretty useless GUI since MS can not think of security as important…1 year later turns patch did not fix it and exploit still exist but it is now at very low level..circle start over at very low….

 

 

MS never seems to focus on the need things like security until something major happens.

Reply | Quote

Alex former Windows users wrote:

Very Low–Less than 1 million computers currently being exploited…no need to patch.

All of them US government Windows server / PCs.

Reply | Quote