Microsoft should consider change in patching process
Several security experts criticised Microsoft this week for not releasing a fix earlier for the Windows ANI flaw, calling for the company to reassess the way it handles critical patches.
Among those voicing concern was Nand Mulchandani of Determina, which initially discovered the flaw last year and disclosed it to Microsoft in December.
"The question is, is the public better served by holding these critical vulnerabilities until a super Tuesday or issue them out of band?" he said.
"The thing we are encouraging Microsoft to do is when Microsoft gets hold of a critical vulnerability, they need to somehow figure out a way of moving ahead in a way that fast-tracks the critical vulnerabilities and then potentially deemphasizes the ones they can do every super Tuesday."
