cfo-au logo
Story image

Symantec responds to latest MS update

16 Apr 2010

The security firm has warned that April will be an important month for IT administrators.

Earlier this week Microsoft released a major raft of security fixes its monthly Patch Tuesday update. Symantec said that Microsoft issued 11 security bulletins which address 25 vulnerabilities, nine of which Microsoft rated as critical.

Oracle and Adobe will also be releasing security updates in the near future. Oracle will address 47 vulnerabilities and Adobe is issuing fixes for both Acrobat and Reader. “The critical Microsoft WinVerifyTrust signature validation vulnerability can be used to really enhance social engineering efforts,” said Joshua Talbot, Security Intelligence Manager, Symantec Security Response. “Targeted attacks are popular and since social engineering plays such a large role in them, plan on seeing exploits developed for this vulnerability.” “It allows an attacker to fool Windows into thinking that a malicious program was created by a legitimate vendor,” Talbot added. “If a user begins a download and they see the Windows’ notification telling them who created it, they might think twice before proceeding if it’s from an unfamiliar source. This vulnerability allows an attacker to force Windows to report to the user that the application was created by any vendor the attacker chooses to impersonate.” Talbot believes that April is going to be quite the month for IT administrators. “With a large number of patches coming from Microsoft and Oracle, including two from Microsoft for public vulnerabilities, and a handful more patches from Adobe, automating the patching process becomes even more critical to ensure that nothing slips through the cracks.”

Story image
Schneider brings AI to fight against energy consumption
The investment into adding AI-assisted advising to its energy and sustainability services aims to promote efficiency and a total reduction of clients’ emissions.More
Story image
Netlinkz revenue surges 846% as secure enterprise cloud technology gains traction
Executive chairman James Tsiolis believes this growth is the start of something much bigger.More
Story image
CT Global Solutions signs on as SAS Managed Analytics Services partner
“Our new partner likes to say ‘SAS turns data into intelligence and CT Global turns that intelligence into profitability’ – and we look forward to working with them delivering on that promise at the local level.”More
Link image
Creating a lean business machine with automation and low-code
Forrester data indicates that process automation was a strategic initiative for many organizations before COVID and remains so after. Catch this webinar to learn more about automation.More
Link image
Why performance monitoring is essential to keep cloud costs down
Cloud comes with many different associated costs, which can sneak up on organisations and drive down efficiency. Here's how to reduce costs by up to 50%.More
Story image
Fiverr launches platform to bring freelancers closer to business
Fiverr says it wanted to create an integration that could fit into an organisation’s workflow and become ‘part of the digital onboarding experience’ for employees, meaning freelancers can access email, Slack, Dropbox, and the Fiverr Business team account.More