Microsoft Security Bulletin Advance Notification for August 2010 (Out Of Band)

[ronjor]

-{ Quote: "Published: July 30, 2010

Microsoft Security Bulletin Advance Notification issued: July 30, 2010
Microsoft Security Bulletin to be issued: August 2, 2010

This is an advance notification of one out-of-band security bulletin that Microsoft is intending to release on August 2, 2010. The bulletin addresses a security vulnerability in all supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2, that is currently being exploited in malware attacks. " }-Microsoft (https://www.microsoft.com/technet/security/bulletin/ms10-aug.mspx)

[NICK ADSL UK]

Thank you Ron ;)

[siljaline]

Thanks, Ron - ;) we could probably expect more of these in the future as the need for patching can't always wait until the next patch cycle.

[NICK ADSL UK]

Microsoft will host a webcast to address customer questions on
the out-of-band bulletin on August 2, 2010,
at 1:00 PM Pacific Time (US & Canada). Register for the
Security Bulletin Webcast at
https://msevents.microsoft.com/CUI/WebCastEventDetails.aspx?EventID=1032456779&EventCategory=4&culture=en-US&CountryCode=US

[ronjor]

-{ Quote: "Today, Microsoft announced plans to release of an out-of-band update to address CVE-2010-2568 (described in Microsoft Knowledge Base Article (2286198 ). As mentioned earlier this month, the Microsoft Malware Protection Center (MMPC), along with other Microsoft Active Protection Program partners, have been keeping a close watch on the use of .LNK files exploiting this vulnerability. As with many new attack techniques, copycat attackers can act quickly to integrate new techniques. Although there have been multiple families that have picked up this vector, one in particular caught our attention this week– a family named Sality, and specifically Sality.AT. Sality is a highly virulent strain. It is known to infect other files (making full removal after infection challenging), copy itself to removable media, disable security, and then download other malware. It is also a very large family—one of the most prevalent families this year. After the inclusion of the .LNK vector, the numbers of machines seeing attack attempts combining malicious .LNKs and Sality.AT soon surpassed the numbers we saw with Stuxnet. We know that it is only a matter of time before more families pick up the technique." }-Microsoft Malware Protection Center (http://blogs.technet.com/b/mmpc/archive/2010/07/30/stuxnet-malicious-lnks-and-then-there-was-sality.aspx)