Skip to main content

Microsoft

The Windows patch to AutoRun is now auto-installed

posted onFebruary 28, 2011
by hitbsecnews

Back in January 2009, when this blog started, I wrote a trio of articles about AutoRun and AutoPlay, even offering a sample autorun.inf file that could be used to test how a Windows computer responded to various tricks bad guys played with the files underlying AutoRun and AutoPlay.

Most importantly, I described a registry update, from Nick Brown and Emin Atac, that totally and completely shut down every autorun.inf file, bar none. I have since used that registry update to disable AutoRun on many computers without regret.

Microsoft's Windows Phone 7: When bad things happen to good phones

posted onFebruary 26, 2011
by hitbsecnews

Windows Phone 7 devices began shipping last October to largely positive reviews. I had a chance to check one out and saw enough to like that I seriously considered making WP7 my first smartphone — and my first Windows phone.

But in the four months since, I’ve begun to waver. And the latest back-and-forth over the first update for WP7 has made me increasingly WP7-shy.

Flawed Windows Phone 7 update affects 10% of users

posted onFebruary 24, 2011
by hitbsecnews

Microsoft has admitted that a small update to Windows Phone 7 caused problems for one in ten users.

Earlier this week, Microsoft rolled out its first upgrade to the mobile OS, to prep the update system for a more important patch due next month. Once the minor update rolled out, users reported it wasn't installing properly, with a few saying it had bricked their handsets. Most of the problems seemed to centre on Samsung phones.

Microsoft fixes a security bug in its virus-scanner

posted onFebruary 24, 2011
by hitbsecnews

Microsoft has patched a bug in its malware scanning engine that could be used as a stepping stone for an attacker looking to seize control of a Windows box.

The bug is fixed in an update to the Microsoft Malware Protection Engine that was pushed out to users of Microsoft's security products on Wednesday. It's what's known as an elevation of privilege vulnerability -- something that could be used by an attacker who already has access to the Windows system to gain complete administrative control.

Even Microsoft's CIO struggles with the cloud

posted onFebruary 24, 2011
by hitbsecnews

He may run IT for one of the best-known names in technology, but even Microsoft's CIO is grappling with new technology challenges like moving to the cloud and handling consumer electronics that employees bring to work.

Tony Scott, CIO for Microsoft, spoke Wednesday to public sector CIOs gathered at the company's headquarters in Redmond, Washington. His team manages over 200,000 Windows 7 and Office 2010 clients, 764,000 SharePoint sites, 1 million devices, 70,000 monthly Live Meeting sessions, and the Microsoft.com website, which attracts 1.7 billion hits per day.

Microsoft Windows 7 SP1 hits Windows Update

posted onFebruary 23, 2011
by hitbsecnews

Just four hours ago, Neowin reported that Microsoft had released the download links for Windows 7 SP1 on their website.

The time it would take for them to push it to Windows update was unknown but now we know – four hours. The service pack is now available on Windows update.

Microsoft downplays Windows vulnerability

posted onFebruary 21, 2011
by hitbsecnews

Microsoft has downplayed a Windows vulnerability affecting its Windows operating systems that could allow remote code execution.

Earlier this week, a proof-of-concept exploit was released but Microsoft suggested it was unlikely that the flaw could be used for remote code execution.

Windows 7 SP1, All You Need To Know, And Do

posted onFebruary 20, 2011
by hitbsecnews

The first service pack for Microsoft’s operating system Windows 7, known as Windows 7 SP1 or Windows 7 Service Pack 1, is just around the corner for all users of the operating system. Microsoft shipped the service pack first to its OEM partners before making it available to subscribers of its MSDN or Technet service and business customers with Volume License agreements.