Patch Tuesday was yesterday and included more than the usual number of Windows patches rated "Critical."
It appears one of the patches is the MS equivalent of the Heartbleed patch, for "Schannel" their implementation of SSL. Patching IMMEDIATELY is recommended for any Windows machine serving HTTPS. More info: http://www.zdnet.com/drop-what-youre-doing-and-patch-the-windows-schannel-bugs-now-7000035738/ and: https://isc.sans.edu/forums/diary/How+bad+is+the+SCHANNEL+vulnerability+CVE-2014-6321+patched+in+MS14-066+/18947 and: https://isc.sans.edu/diary/Microsoft+November+2014+Patch+Tuesday/18941 -- Ted Roche Ted Roche & Associates, LLC http://www.tedroche.com --- StripMime Report -- processed MIME parts --- multipart/alternative text/plain (text body -- kept) text/html --- _______________________________________________ Post Messages to: [email protected] Subscription Maintenance: http://mail.leafe.com/mailman/listinfo/profox OT-free version of this list: http://mail.leafe.com/mailman/listinfo/profoxtech Searchable Archive: http://leafe.com/archives/search/profox This message: http://leafe.com/archives/byMID/profox/cacw6n4vbavkhtwg+f1fzndopoztkuulmpd_qvnqku+omv4r...@mail.gmail.com ** All postings, unless explicitly stated otherwise, are the opinions of the author, and do not constitute legal or medical advice. This statement is added to the messages for those lawyers who are too stupid to see the obvious.
