Skip to main content

Microsoft

Two ActiveX vulnerabilities make IE a toxic choice

posted onJuly 13, 2009
by hitbsecnews

Last week Microsoft issued a security advisory warning of an ActiveX vulnerability relating to a video control. There’s no patch in sight. Today we get another advisory relating to another ActiveX control, this time used to display Excel spreadsheets. Since tomorrow is Patch Tuesday, we’re not going to see a patch for this vulnerability either. Both vulnerabilities are being actively targeted by hackers. Is Internet Explorer too toxic to trust?

Should you buy Windows 7?

posted onJuly 9, 2009
by hitbsecnews

Microsoft's next installment of Windows doesn't launch until October, but deep discounts on some versions are available through Saturday if you want to pre-order. Before pouncing on this deal, make sure it's right for your PC.

There are plenty of reasons why you'd want Windows 7. It appears to be more stable - less prone to crashes - than previous versions of Windows. It's less annoying than Vista, which could deluge users with security warnings and other nagging reminders. Windows 7 has a cleaner, simpler interface.

Six Security Fixes Expected on Patch Tuesday

posted onJuly 9, 2009
by hitbsecnews

On Tuesday, Microsoft is planning to roll out six fixes -- three "critical" and three "important" -- in its July security update.

The security issues expected to be addressed in this patch include four remote code execution (RCE) vulnerabilities and two elevation-of-privilege considerations. Affected programs range from Windows operating system components, to servers, to a fix for Microsoft Publisher.

"This is a critical month for Microsoft with published bug reports and attack code in the wild," noted Andrew Storms, director of security at nCircle.

Microsoft issues security warning for XP users

posted onJuly 7, 2009
by hitbsecnews

Software giant Microsoft has released a warning about a computer security vulnerability before it has even released a patch for the problem.

The flaw, which was announced by the company yesterday, affects users of web-browser Internet Explorer that is running on Windows XP or Windows Server 2003 operating software. The flaw allows hackers to remotely control a user's computer.

If a user visits a site infected with malware, the flaw could be used immediately by hackers. Microsoft is calling the flaw the ‘Zero Day' vulnerability.

Microsoft warns world of critical security flaw

posted onJuly 6, 2009
by hitbsecnews

Users of Internet Explorer, Windows XP or Windows Server 2003 will want to be aware of a recent warning that Microsoft published. Starting today, the company began notifying the world that anyone using a combination of IE and the mentioned operating systems is at risk of having a recently-published ActiveX flaw exploited.

Bing searches to include Twitter results

posted onJuly 2, 2009
by hitbsecnews

Microsoft has announced a new feature for its Bing search service, which will allow users to receive information on Twitter posts. The new service generates results from thousands of "carefully selected" Twitter users, according to Microsoft, including its own employees, search experts, bloggers and personalities such as Al Gore.

Microsoft's Gazelle browser: A layperson's explanation

posted onJuly 2, 2009
by hitbsecnews

Microsoft Research has published a new article that explains in more layperson-like terms exactly what its “Gazelle” Web browser is and why the company’s researchers believe it’s needed.

Microsoft is slated to present a paper on Gazelle at the Usenix Security Symposium in August. At that event, the Gazelle team will describe “the design and construction of a browser that is actually a multi-principal operating system.” (A copy of Microsoft’s Gazelle Usenix paper is available now.)

Windows 7 Build 7264 Leaked

posted onJuly 1, 2009
by hitbsecnews

Microsoft seems to be pushing much closer to the RTM of Windows 7 with the latest build that has been leaked on the web.

Windows 7 build 7264 it the first version that no longer uses beta/RC keys. If everything goes well then Microsoft should be right on track for the July 13th release of the RTM.

This should be something that hackers everywhere are jumping on. As is no longer accepts the beta and RC keys, it should also feature the retail activation and hackers everywhere will be dying to claim to be the first to crack it.

Microsoft to push IE 8 to more business users in August

posted onJune 30, 2009
by hitbsecnews

Microsoft will start pushing Internet Explorer (IE) 8 to business users via Windows Server Update Services (WSUS) on August 25, according to a June 29 posting on the IE Blog.

Microsoft already began pushing IE 8 to users via Windows Update and Automatic Update in April.

If WSUS admins aren’t ready/willing for IE 8 to install across PCs in their organizations, they should turn off auto-approve for the IE rollup, the IE team is advising. Microsoft shared the latest on its IE 8 rollout plans the day before Mozilla made available for download the final version of Firefox 3.5.

Analyst Criticizes Windows 7 Upgrade Limit

posted onJune 30, 2009
by hitbsecnews

A key Microsoft analyst criticized the company's free upgrade program for Windows 7 for limiting free copies to only the first 25 PCs a purchaser buys. Meanwhile, early "pre-order" sales of Windows 7 seem to have taken off like a rocket on Friday, at least according to e-tailer Amazon.