Security Patch Management

MUST READ How to deploy Microsoft patches without Active Directory or SMS EXPERT ANSWER - What is the simplest way to deploy Microsoft patches to 100+ desktops if you do not have Active Directory or SMS? Step-by-Step Guide: Best practices for security patch management TIP - This step-by-step guide offers best practices on how to deploy a security patch and provides the tools you will need to mitigate the risk of a compromised computer. Patch deployment timeline EXPERT ANSWER - What is a typical patch deployment timeline from the announcement phase to completion for a mid- to large company?

NEWS: 1 - 3 of 328

	Microsoft to address DirectShow, ActiveX zero-day flaws SearchSecurity.com | 09 Jul 2009 ARTICLE - The software giant said it would issue six updates including three critical, repairing two flaws being actively targeted in the wild.

	Adobe patches ColdFusion vulnerability blocking website attack SearchSecurity.com | 09 Jul 2009 ARTICLE - Users of ColdFusion 8 can apply a patch which blocks ongoing attacks compromising websites built with the application development platform.

	Adobe fixes critical Shockwave Flash Player flaw SearchSecurity.com | 25 Jun 2009 ARTICLE - Adobe released an update to its Shockwave Flash Player to repair a critical flaw that could allow an attacker to take complete control of a system.

	VIEW ALL NEWS ON SECURITY PATCH MANAGEMENT

EXPERT TECHNICAL ADVICE: 1 - 3 of 45

SECURITY PATCH MANAGEMENT EXPERTS
			Michael Cobb, featured expert Founder and Managing Director, Cobweb Applications Ltd. ASK A QUESTION

	When should a virtual patch be used? 08 Jun 2009 EXPERT ANSWER - Learn how virtual patches can help administrators review, test and schedule official patch updates and find out about the benefits a virtual patch provides, such as protection against identified vulnerabilities.

	Microsoft Baseline Security Analyzer: Do updates offer improved Windows security? 19 Aug 2008 TIP - Contributor Ed Tittel explains how to use the new and improved MBSA.

	Database patch denial: How 'critical' are Oracle's CPUs? 25 Jun 2008 TIP - A recent survey found that a considerable number of users are outright rejecting Oracle's Critical Patch Updates.

	VIEW ALL EXPERT TECHNICAL ADVICE ON SECURITY PATCH MANAGEMENT

REFERENCE & LEARNING: 1 - 3 of 5

	Information security book excerpts and reviews SearchSecurity.com | 19 Feb 2009 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	Prove your patching prowess 23 Mar 2006 SECURITY QUIZ - Is Patch Tuesday the bane of your existence? Take our quiz and learn best practices for better patch management.

	Curing the Patch Management Headache: Common Issues with Testing CRC Press | 28 Sep 2005 BOOK CHAPTER - In this excerpt from Chapter 8 of Curing the Patch Management Headache, author Felicia M. Nicastro explains the importance of properly testing patches and the common challenges some organizations face.

	VIEW ALL REFERENCE & LEARNING ON SECURITY PATCH MANAGEMENT

MAGAZINE CONTENT (free subscription required): 1 - 3 of 9

	Security services: Fiberlink's MaaS360 Mobility Platform Information Security Magazine | 28 Nov 2008 HOT PICK & PRODUCT REVIEWS - The MaaS360 Mobility Platform service handles remote device updates, such as OS patches.

	Product Review: Shavlik's NetChk Compliance Information Security Magazine | 28 Nov 2008 HOT PICK & PRODUCT REVIEWS - Shavlik's NetChk Compliance automates compliance and provides control by actively managing system and security settings and allows the IT manager to identify and mitigate risks.

	Vulnerability Management: QualysGuard Enterprise (2007) Information Security Magazine | 01 Apr 2007 FEATURES - 2007 Readers' Choice Awards Vulnerability assessment, management

	VIEW ALL MAGAZINE CONTENT ON SECURITY PATCH MANAGEMENT

DEFINITIONS: 1 - 3 of 5

	Patch Tuesday 29 Nov 2004 WORD - Patch Tuesday is the second Tuesday of each month, when Microsoft releases the newest fixes for its Windows operating system and related software applications. Microsoft introduced Patch Tuesday in 2003 as a means of reducing ...

	attack vector 13 Sep 2004 WORD - An attack vector is a path or means by which a hacker (or cracker) can gain access to a computer or network server in order to deliver a payload or malicious outcome. Attack vectors enable hackers to exploit system ...

	back door 03 May 2004 WORD - A back door is a means of access to a computer program that bypasses security mechanisms. A programmer may sometimes install a back door so that the program can be accessed for troubleshooting or other purposes. However, ...

	VIEW ALL DEFINITIONS ON SECURITY PATCH MANAGEMENT

	SEE ALSO - Topics Related to Security Patch Management:  Configuration Management Planning, Security Testing and Ethical Hacking, Vulnerability Risk Assessment