Hello everyone. Kim Komando and the staff there are providing the updates for this month on Windows Update. According to the article, there are over 100 vulnerabilities patched.
Several CVE numbers are given and which are given high priority to fix. There are the usual suspects in vulnerabilities including Remote code execution, Elevation of Privilege, Security Feature Bypass, Denial of Service, Spoofing, and Information Disclosure.
Two of the bugs and vulnerabilities are zero-days and are given high priority.
TSB will not be covering windows update this month due to other more critical topics including last week’s topic needing to be updated. Its no longer a practical talking point, it is now out.
Please check out Kim Komando’s article on Windows Update to get the scoop on it and get instructions on getting windows to update. If you don’t, it’ll update on its schedule and it may reboot when you don’t want it to.
From Security Now’s blurb on episode 866: Spring4Shell
Spring4Shell
We’ll wrap up this week’s podcast by revisiting Spring4Shell. Last week, when we first mentioned it, it was just a questionable itch. Now, a week later, it’s a full blown outbreak deserving of today’s podcast title. But before we roll up our sleeves for that we’re going to examine credible reports of a 0-day in the Internet’s most popular web server platform. We’re going to take a look at Microsoft’s newly announced “Autopatch” system, and the rapidly approaching end-of-security life of some Windows 10 editions. We have another instance of an NPM protest-ware modification of a highly used library, and I want to share a bit of miscellany and listener feedback. Then we’ll finish by looking at what one week has done to Spring4Shell.
We covered Spring4Shell on last week’s program so we’ll have to do a little bit of reading to catch you up. Trend Micro has an article on it which I’ve not read as of yet.
I put this here because if you didn’t patch last week, I’d urge you to do so during patch tuesday if you use this software.
Make it a great day!
Discover more from Jared's Technology podcast network
Subscribe to get the latest posts sent to your email.