Newsletter Archives
-
Firmware and drivers
PATCH WATCH
By Susan Bradley
Why are drivers and firmware so important?
Once upon a time, you would set up a computer and any display adapter driver or firmware would be automatically installed to match the hardware. More than likely, you would not install new drivers for a long, long time.
But now with both Windows 10 and 11, I annually review drivers and firmware as the Windows feature releases come out. I go through certain steps and processes to rule out issues that might have been triggered by out-of-date drivers, especially if I’ve encountered side effects that I can’t otherwise explain.
Read the full story in our Plus Newsletter (20.14.0, 2023-04-03).
-
The sky is not falling
PATCH WATCH
By Susan Bradley
You may have seen the headlines: Outlook is getting a patch for a zero-day attack that can’t be fixed just by turning off the preview pane.
Don’t panic. The risk is greatest if you are connecting Outlook to an on-premises Exchange server.
Importantly, the attacks have been seen only in targeted firms. The risk is higher for government agencies. Microsoft has even provided a script to determine whether you are at risk.
Read the full story in our Plus Newsletter (20.12.0, 2023-03-20).
-
Microsoft kills off Internet Explorer — mostly
ISSUE 20.08 • 2023-02-20 PATCH WATCH
By Susan Bradley
Not feeling the love from Microsoft this month?
That might be because the company is saying goodbye to its aged Internet Explorer Web browser (IE), albeit only on certain platforms.
For Windows 10, the death of IE is not part of this month’s Windows update but rather part of the update to the Edge browser. That update would have been in the background, silent, and you may not have noticed it. Even if you did, you probably didn’t pay much attention. Unless, of course, you had moved from IE to Edge a while back. For you, the update re-migrated your favorites and bookmarks, making a duplicate list.
Read the full story in our Plus Newsletter (20.08.0, 2023-02-20).
This story also appears in our public Newsletter. -
January’s patching cyclone
PATCH WATCH
By Susan Bradley
We’re a bit soggy and wet at the AskWoody Tech LLC Global Headquarters here in central California.
We’ve had nearly a week of rain, and more is coming. I shouldn’t complain — severe drought has brought our state’s water supply down to historically low levels, so the water is needed and much appreciated. But when Microsoft rains down upon us at the same time, the total deluge is a bit much.
For January, Microsoft fixed 98 security vulnerabilities, said goodbye (for the final time) to the much-beloved Windows 7, also said goodbye to the less used (but popular among its buffs) Windows 8.1, and actually released updates to Microsoft’s on-premises mail server, Exchange.
Read the full story in our Plus Newsletter (20.03.0, 2023-01-16).
-
Patching year 2022 comes to a close
ISSUE 19.51 • 2022-12-19 PATCH WATCH
By Susan Bradley
Every vendor brought us a lump of coal.
No matter which platform you use, we are closing out a year in which we have been very vulnerable. From Microsoft to Apple to our firewall vendors — and even to Linux distros such as Ubuntu and Mint — just about every vendor has ended the year with patches, vulnerabilities unfixed, and new releases.
Read the full story in our Plus Newsletter (19.51.0, 2022-12-19).
This story also appears in our public Newsletter. -
Dealing with incremental updates, aka “dribbles”
PATCH WATCH
By Susan Bradley
Last year, Microsoft announced that Windows was moving to an annual release schedule rather than the twice-a-year release cadence.
The impression at that time was that Microsoft would be settling into a nice, boring release schedule with only one disruption per year. But the reality so far has been the exact opposite. Even with the Insider testing program, the timing is such that you can’t really test things until they get to the general public.
Read the full story in our Plus Newsletter (19.45.0, 2022-11-07).
-
Tracking the larger Microsoft ecosystem
PATCH WATCH
By Susan Bradley
With Microsoft 365 making inroads onto platforms other than Windows, it’s increasingly important to track versioning and patches elsewhere.
For example, it’s not enough to talk about Microsoft 365 as if it existed only on Windows PCs. We know our readers have more than one device, including phones and tablets. So while my focus with Patch Watch will continue to center on Windows, you’ll hear more from me about the broader Microsoft universe.
Read the full story in our Plus Newsletter (19.44.0, 2022-10-31).
-
22H2 – Windows 10 edition
PATCH WATCH
By Susan Bradley
We anticipate an uneventful release of Windows 10 22H2 later in the month.
Meanwhile, we’re watching several side effects from the September and October updates that have not yet been addressed. Most of these side effects are not being seen in the consumer and home space, and here’s hoping it stays that way. Issues do tend to bubble up over time, though.
Read the full story in our Plus Newsletter (19.42.0, 2022-10-17).
-
Patch your humans
PATCH WATCH
By Susan Bradley
The September updates for Windows appear to be better behaved than those in other recent months.
Gone is the notation that Windows 10 or Windows 11 will trigger audio issues when the updates are installed. Also, thankfully, it appears that the problems with USB printers have been resolved.
Read the full story in our Plus Newsletter (19.38.0, 2022-09-19).
-
Printer bugs squashed this month
PATCH WATCH
By Susan Bradley
If you are like me, you still print. A lot.
Just this week, I was fighting a Lexmark printer that no longer would recognize “Tray 1” and refused to print. To get someone to look at the printer is going to cost nearly as much as it did to purchase the printer.
But we’re not here to hear about my printer woes — we’re here to discuss potential side effects due to July’s updates. In yet another chapter of this sad story, we’re once again patching Print Spooler elevation of privileges. That means, once again, I’ll be keeping a very sharp eye out for printing side effects. And my sharp eye will also be on label printers, because those have been impacted by previous patches. (This has been going on for a really long time.)
Read the full story in our Plus Newsletter (19.29.0, 2022-07-18).
-
Dealing with DCOM
PATCH WATCH
By Susan Bradley
In the June updates, Microsoft continues its journey to harden the Distributed Component Object Model (DCOM), with the goal of making it more resilient to attack.
DCOM is a proprietary Microsoft software component that allows COM objects to communicate with each other over a network. Network OLE was the precursor to DCOM (remember Windows 3.1.1?). Because DCOM can run programs on other computers, hackers can leverage it for lateral-movement attacks through your network, gaining access to more data. This activity can be difficult to detect because it’s not malware or hacker tools — all it takes to access DCOM is PowerShell.
Read the full story in our Plus Newsletter (19.26.0, 2022-06-27).
-
The end of the road for Internet Explorer
PATCH WATCH
By Susan Bradley
Well, not quite. Sort of. Maybe. Partially.
Over a year ago, Microsoft published the Internet Explorer 11 desktop app retirement FAQ, announcing that IE11 would be retired on June 15, 2022. (That’s last Wednesday, in case you missed it.) Retirement means the end of support. The FAQ is full of details, confusing and self-contradictory.
So what does this really mean?
Read the full story in our Plus Newsletter (19.25.0, 2022-06-20).