Newsletter Archives

• MS-DEFCON 4: Mixed bag for March

  Posted on March 25, 2025 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 22.12.1 • 2025-03-25

  

  By Susan Bradley

  Although CISA has given businesses who follow its guidance until early April to install updates released in March, I’m urging you to do so now.

  Accordingly, I’m lowering the MS-DEFCON level to 4. You can find CISA’s deadlines in its Known Exploited Vulnerabilities Catalog.

  Note that my recommendations for businesses include some possible exceptions.

  Anyone can read the full MS-DEFCON Alert (22.12.1, 2025-03-25).

  AskWoody Plus Alert, MS-DEFCON Alerts, Chrome, Edge, Microsoft marketing, MS-DEFCON, MS-DEFCON 4, NVIDIA, OneDrive, Patch Lady Posts, RDP, Remote Desktop Connection, Windows 10 22H2, Windows Update

• MS-DEFCON 4: Beware of clickbait

  Posted on February 25, 2025 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 22.08.1 • 2025-02-25

  

  By Susan Bradley

  Don’t be taken in by ‘The sky is falling!’ headlines.

  It’s been my experience that what is purported to be news is often based on a limited number of users, not everyone on the planet. Based on my own research and testing, I’m comfortable in lowering the MS-DEFCON level to 4.

  As a small case study, consider that Will Fastie and I each have several Windows 11 PCs. During the month, we compare and contrast the news with what we are seeing on our own equipment. For the most part, we don’t see the effects described by those headlines.

  Anyone can read the full MS-DEFCON Alert (22.08.1, 2025-02-25).

  AskWoody Plus Alert, MS-DEFCON Alerts, CVE-2025-21420, HP printer, KB5014754, KB5050021, MS-DEFCON, MS-DEFCON 4, Patch Lady Posts, USB Audio, Windows 11 24H2

• MS-DEFCON 4: Microsoft begins a strong push for 24H2

  Posted on January 28, 2025 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 22.04.1 • 2025-01-28

  

  By Susan Bradley

  Last week, Microsoft announced that Windows 11 24H2 is now “broadly available.”

  This notice was contained in the Microsoft Learn post Windows 11, version 24H2 known issues and notifications.

  Except for my continuing recommendation not to install 24H2, I’m lowering the MS-DEFCON level to 4. There are some problems, but they are manageable. Go ahead and patch.

  Microsoft’s language in the Learn post was more direct than usual and included Windows 10 in the mix.

  Anyone can read the full MS-DEFCON Alert (22.04.1, 2025-01-28).

  AskWoody Plus Alert, MS-DEFCON Alerts, Fortinet, KB5049235, KB5049981, MS-DEFCON, MS-DEFCON 4, Networking, Patch Lady Posts, SQL Server, SQL Server 2019, Windows 10 22H2, Windows 11, Windows 11 24H2

• MS-DEFCON 4: The gift of patching

  Posted on December 24, 2024 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 21.52.1 • 2024-12-24

  

  By Susan Bradley • Comment about this alert

  ’Twas the night before Christmas, and all through the house and office, not a creature was stirring — except yours truly, because I was checking my systems to see whether they were all fully up to date.

  Seriously, I always find that the time around the holidays is a good moment to do your patching. After the holiday dinner has been served and everyone is in their holiday ham or turkey coma, I can sneak away to review my technology. The end of the year is just a week away, and as I always say, you should start the new year with everything polished and shiny. Therefore, I’m lowering the MS-DEFCON level to 4.

  Anyone can read the full MS-DEFCON Alert (21.52.1, 2024-12-24).

  AskWoody Plus Alert, MS-DEFCON Alerts, Crowdstrike, CVE-2024-49112, CVE-2024-49138, iOS 18, iOS 18.2, KB4484305, MS-DEFCON, MS-DEFCON 4, Outlook (new), Patch Lady Posts

• MS-DEFCON 4: Holiday patching

  Posted on November 26, 2024 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 21.48.1 • 2024-11-26

  

  By Susan Bradley

  Thanksgiving in America is a mere two days away. I often use the holiday to multitask while the turkey is roasting.

  One task for you is applying updates. I’m lowering the MS-DEFCON level to 4; other than my recommendation to avoid Windows 11 24H2 for now, patching should be safe.

  Thanksgiving signals the approaching end of year. For both home and office, it’s a great time to reflect on the challenges of the past year and develop a technology plan for the upcoming year. In my case, I’ll be looking at retiring some devices that I no longer need or use, upgrading some existing equipment, replacing aging devices with new ones, and looking for simplifications wherever I can find them.

  Anyone can read the full MS-DEFCON Alert (21.48.1, 2024-11-26).

  AskWoody Plus Alert, MS-DEFCON Alerts, Copilot+ PCs, CVE-2024-44308, CVE-2024-44309, Email, iOS, KB5046613, KB5046633, KB5046714, macOS Sequoia, MS-DEFCON, MS-DEFCON 4, Outlook (new), Patch Lady Posts, Recall, Windows Server 2022

• MS-DEFCON 4: 24H2 is a work in progress

  Posted on October 22, 2024 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 21.43.1 • 2024-10-22

  

  By Susan Bradley

  Every month, I look back at the issues and oddities I’ve been tracking to see whether they are merely corner cases or something more widespread.

  One thing is certain: I am not recommending the installation of Windows 11 24H2 now, especially for consumers and small businesses. I am testing and evaluating the release, and I will continue to keep you informed about bugs and problems. For everything else, I’m lowering the MS-DEFCON level to 4.

  Anyone can read the full MS-DEFCON Alert (21.43.1, 2024-10-22).

  AskWoody Plus Alert, MS-DEFCON Alerts, Always On VPN, KB5043950, MS-DEFCON, MS-DEFCON 4, Outlook (classic), Outlook (new), Patch Lady Posts, SSDs, Windows 11 24H2

• MS-DEFCON 4: Dual-boot computers now safe to patch

  Posted on September 24, 2024 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 21.39.1 • 2024-09-24

  

  By Susan Bradley

  In the August updates, Microsoft introduced a bug that impacted Windows users who dual-booted into Windows and Linux.

  At first it was thought the bug had not been fixed in the September updates, but upon further investigation, I learned that it had been addressed. Because it is now fixed, I find no reason to delay updates further and am therefore lowering the MS-DEFCON level to 4.

  Anyone can read the full MS-DEFCON Alert (21.39.1, 2024-09-24).

  AskWoody Plus Alert, MS-DEFCON Alerts, Dual Boot, Intune, iOS 17, iOS 18, KB5043064, KB5043076, MS-DEFCON, MS-DEFCON 4, Patch Lady Posts, Repair Install, Windows Autopatch, WSUS, WSUS Automated Maintenance

• MS-DEFCON 4: Side effects for dual booters

  Posted on August 27, 2024 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 21.35.1 • 2024-08-27

  

  By Susan Bradley

  Secure Boot is causing — once again — side effects for Windows patchers.

  The August updates are triggering issues for those who dual-boot into Linux. Because this is unlikely to affect very many users, and because the IPv6 bug I alerted you to ten days ago is now well understood, I feel that lowering the MS-DEFCON level to 4 is safe.

  That assumes you do not ignore the IPv6 matter.

  Anyone can read the full MS-DEFCON Alert (21.35.1, 2024-08-27).

  AskWoody Plus Alert, MS-DEFCON Alerts, CVE-2024-38063, KB5041578, KB5041580, KB5041585, MS-DEFCON, MS-DEFCON 4, Patch Lady Posts, Secure Boot, Server 2019

• MS-DEFCON 4: Consumers get a break

  Posted on June 25, 2024 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 21.26.1 • 2024-06-25

  

  By Susan Bradley

  We’re halfway through the patching year!

  It’s time to install the June updates, which is why I’m lowering the MS-DEFCON level to 4. I’m not seeing any widespread issues or major impacts. Most side effects seem to be with Win11 Insider versions and 24H2.

  It appears that new technology allowing you to sync your phone with your computer is causing a bit of a CPU hit in the 24H2 release. Microsoft is trying to fix this issue before it gets released to the rest of us. That’s good news.

  In the very good news category is the delay in releasing Microsoft Recall, the much-hyped “reminder” software. The company pulled back at the last minute, due to concerns from security researchers and businesses.

  Anyone can read the full MS-DEFCON Alert (21.26.1, 2024-06-25).

  AskWoody Plus Alert, MS-DEFCON Active Directory, Alerts, bug bounty, CVE-2023-38606, CVE-2024-30078, KB5039211, KB5039212, KB5039217, MS-DEFCON, MS-DEFCON 4, Process Monitor, Recall, SQL Server, Sysmon

• MS-DEFCON 4: May updates ready to go

  Posted on May 28, 2024 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 21.22.1 • 2024-05-28

  

  By Susan Bradley

  The May releases are once again a bit of a mixed bag, relatively quiet for consumers but a little bumpy for businesses.

  For three days last week, Microsoft hosted its developer conference, BUILD. It’s an important event for developers, but the headlines are always about things to come.

  On the other hand, I keep an eye on the now — what’s already been released — and how those patches, updates, and new features affect our everyday use of Microsoft’s technology. For example, Microsoft announced the Recall feature of its new line of Copilot+ PCs. That last part is important, because Recall requires AI support built into the hardware, and it will be available only with Windows 11.

  Anyone can read the full MS-DEFCON Alert (21.22.1, 2024-05-28).

  AskWoody Plus Alert, MS-DEFCON Alerts, Copilot, KB5037765, KB5037771, KB5038351, KB5038352, MS-DEFCON, MS-DEFCON 4, Patch Lady Posts, Recall, Windows Lock Screen

• MS-DEFCON 4: Safe — for now

  Posted on April 23, 2024 at 02:45 CDT by Susan Bradley • Comment in the Forums

  

  ISSUE 21.17.1 • 2024-04-23

  

  By Susan Bradley

  The April updates have been relatively quiet, with some exceptions.

  That’s why I’m lowering the MS-DEFCON level to 4. Most of my concerns lie not with this month’s patches but rather with the timing of future mandates.

  In addition, Microsoft finally acknowledged an “oopsie” with Edge.

  Anyone can read the full MS-DEFCON Alert (21.17.1, 2024-04-23).

  AskWoody Plus Alert, MS-DEFCON Alerts, BitLocker, CVE-2023-24932, Edge, KB5014754, KB5025885, KB5034441, MS-DEFCON, MS-DEFCON 4, Secure Boot, Suggestions

• MS-DEFCON 4: A “sort of” quiet February

  Posted on February 27, 2024 at 02:45 CST by Susan Bradley • Comment in the Forums

  

  ISSUE 21.09.1 • 2024-02-27

  

  By Susan Bradley

  The February updates have generally been well behaved, with one major exception: gamers.

  Otherwise, things have been mostly quiet. That’s why I feel comfortable lowering the MS-DEFCON level to 4. Patches are unlikely to cause most users any problems.

  Anyone can read the full MS-DEFCON Alert (21.09.1, 2024-02-27).

  AskWoody Plus Alert, MS-DEFCON .NET patches, Alerts, ConnectWise, Exchange Server, KB5034441, KB5034763, KB5034765, MS-DEFCON, MS-DEFCON 4, Patch Lady Posts, ScreenConnect, SQL Server, WinRE
• « Older Entries