Microsoft Updates And Notifications For May 2016

https://blogs.technet.microsoft.com/msrc/2016/04/29/changes-to-security-update-links/

 

https://blogs.technet.microsoft.com.../may-2016-non-security-office-update-release/

 

https://support.microsoft.com/en-us/kb/894199

 

Microsoft Security Bulletin Summary for May 2016

Published: May 10, 2016
Version: 1.0
On this page

Executive Summaries
Exploitability Index
Affected Software
Detection and Deployment Tools and Guidance
Acknowledgments
Other Information

This bulletin summary lists security bulletins released for May 2016.

For information about how to receive automatic notifications whenever Microsoft security bulletins are issued, visit Microsoft Technical Security Notifications.

Microsoft also provides information to help customers prioritize monthly security updates with any non-security updates that are being released on the same day as the monthly security updates. Please see the section, Other Information.https://technet.microsoft.com/library/security/ms16-may

 

Microsoft Security Advisory 3155527

Update to Cipher Suites for FalseStart

Published: May 10, 2016 Version: 1.0


Executive Summary

FalseStart allows the TLS client to send application data before receiving and verifying the server Finished message. This allows an attacker to launch a man-in-the-middle (MiTM) attack to force the TLS client to encrypt the first flight of application_data records using the attacker’s chosen cipher suite from the client’s list. To avoid downgrade attacks, TLS clients only allow FalseStart when their strongest cipher suites are negotiated.

This advisory update provides a routine maintenance of the list of cipher suites that can be used with FalseStart. This update has no impact on connectivity or interoperability.

For additional details and deployment guidance, see Microsoft Knowledge Base Article 3155527.

https://technet.microsoft.com/en-us/library/security/3155527

 

https://blogs.technet.microsoft.com...ng/2016/05/10/may-2016-office-update-release/

 

https://technet.microsoft.com/en-us/library/security/MS16-064

 

https://blogs.technet.microsoft.com...17/simplifying-updates-for-windows-7-and-8-1/

 

https://technet.microsoft.com/library/security/2880823.aspx