2 Rare Microsoft Patches

To keep your organization's network secure from threats your software working effectively, patching the software it uses is absolutely imperative. The reason is that the threat landscape is constantly evolving. Recently, Microsoft announced that they have released an emergency out-of-band security update to fix two security issues, an atypical act for the software giant. 

Microsoft typically releases patches on “patch Tuesday”, or every second Tuesday of the month, but because of the threats these vulnerabilities created, they went ahead and patched them. Below is a look at the two patches they released in their rare out-of-band patch. 

Internet Explorer Zero-Day

The crucial vulnerability that was patched was a zero-day vulnerability located in their antiquated Internet Browser, Internet Explorer. Being a zero-day vulnerability, it had already been exploited in the world, explaining the requirement for the unscheduled bug fix. 

Not much is known about the vulnerability, but Microsoft has suggested it was a remote code execution exploit that, if taken advantage of, could give a hacker complete control over the account of another user. The exploit requires that the hacked party click on a link in a phishing email while using Internet Explorer. 

Luckily, IE is only used by under two percent of users, but attacks have already happened so remaining vigilant about any use of IE is imperative. Avoid IE and you won’t have to worry about security problems coming from the old browser. 

Microsoft Defender DOS Bug

The second patched issue in the out-of-band patch was a denial of service exploit in Microsoft Defender, the antivirus shipped with Windows 10. The bug doesn’t seem to be overly troubling because a hacker would need unfettered access to a computer and the ability to execute code. The code would disable Windows Defender’s components enough to give hackers access, and the ability to take over the system with malware or ransomware. 

Keeping your software patched and running smoothly is exceptionally vital. Reach out to our expert IT technicians today to see how Macro Systems can help you manage your system updates and software management at 703-359-9211.