Patch Management

MUST READ How to deploy Microsoft patches without Active Directory or SMS EXPERT ANSWER - What is the simplest way to deploy Microsoft patches to 100+ desktops if you do not have Active Directory or SMS? Step-by-Step Guide: Best practices for security patch management TIP - This step-by-step guide offers best practices on how to deploy a security patch and provides the tools you will need to mitigate the risk of a compromised computer. Patch deployment timeline EXPERT ANSWER - What is a typical patch deployment timeline from the announcement phase to completion for a mid- to large company?

NEWS: 1 - 3 of 259

	Inside MSRC: Microsoft explains Word, Publisher flaws SearchSecurity.com | 05.13.2008 OPINION - Security patching programs are not much different than racquetball games, says Microsoft's Bill Sisk. It's all about devising a strategy early to maintain control.

	Researchers warily watch for Microsoft GDI exploits SearchSecurity.com | 16 Apr 2008 ARTICLE - Symantec, US-CERT and other security organizations are tracking attempts to exploit the GDI flaw Microsoft addressed last week in its MS08-021 patch bulletin.

	Oracle fixes 41 flaws in April CPU SearchSecurity.com | 16 Apr 2008 ARTICLE - Attackers could exploit several Oracle flaws to compromise the confidentiality and integrity of targeted systems, Symantec said hours after Oracle's April 2008 CPU was released.

	VIEW ALL NEWS ON PATCH MANAGEMENT

EXPERT TECHNICAL ADVICE: 1 - 3 of 46

PATCH MANAGEMENT EXPERTS
			Michael Cobb Founder and Managing Director, Cobweb Applications Ltd. ASK A QUESTION

	Worst practices: Encryption conniptions 03 Apr 2008 TIP - In honor of April Fools' Day, Mike Chapple continues a month-long series that highlights the industry's most common mistakes. One of the major bad habits: a lack of encryption.

	Is it important to keep a Java Runtime Environment (JRE) implementation up to date? 04 Jan 2008 EXPERT ANSWER - Critical security flaws are often discovered in Java Runtime Environment implementations. Unfortunately, most users don't apply any appropriate patches. Ed Skoudis reveals the security risks posed by a vulnerable JRE.

	What is an ideal patch management process for small businesses? 18 Oct 2007 EXPERT ANSWER - Patch management and testing can be a time-consuming and resource-hungry task. In this expert response, Michael Cobb demonstrates how to streamline the process.

	VIEW ALL EXPERT TECHNICAL ADVICE ON PATCH MANAGEMENT

REFERENCE & LEARNING: 1 - 3 of 4

	Information security book excerpts and reviews SearchSecurity.com | 20 Sep 2006 INFORMATION SECURITY BOOKSHELF - Visit the Information Security Bookshelf for book reviews and free chapter downloads.

	Prove your patching prowess 23 Mar 2006 SECURITY QUIZ - Is Patch Tuesday the bane of your existence? Take our quiz and learn best practices for better patch management.

	Curing the Patch Management Headache: Common Issues with Testing CRC Press | 28 Sep 2005 BOOK CHAPTER - In this excerpt from Chapter 8 of Curing the Patch Management Headache, author Felicia M. Nicastro explains the importance of properly testing patches and the common challenges some organizations face.

	VIEW ALL REFERENCE & LEARNING ON PATCH MANAGEMENT

MAGAZINE CONTENT (free subscription required): 1 - 3 of 7

	Vulnerability Management Information Security Magazine | 01 Apr 2007 FEATURES - 2007 Readers' Choice Awards Vulnerability assessment, management

	Viewpoint Information Security Magazine | 01 Mar 2007 HOT PICK & PRODUCT REVIEWS -

	Vulnerability Scanning Information Security Magazine | 01 Feb 2007 HOT PICK & PRODUCT REVIEWS - PatchLink's PatchLink Update 6.3

	VIEW ALL MAGAZINE CONTENT ON PATCH MANAGEMENT

DEFINITIONS: 1 - 3 of 5

	Patch Tuesday 29 Nov 2004 WORD - Patch Tuesday is the second Tuesday of each month, when Microsoft releases the newest fixes for its Windows operating system and related software applications. Microsoft introduced Patch Tuesday in 2003 as a means of reducing ...

	attack vector 13 Sep 2004 WORD - An attack vector is a path or means by which a hacker (or cracker) can gain access to a computer or network server in order to deliver a payload or malicious outcome. Attack vectors enable hackers to exploit system ...

	back door 03 May 2004 WORD - A back door is a means of access to a computer program that bypasses security mechanisms. A programmer may sometimes install a back door so that the program can be accessed for troubleshooting or other purposes. However, ...

	VIEW ALL DEFINITIONS ON PATCH MANAGEMENT

	SEE ALSO - Topics Related to Patch Management:  Vulnerability Assessment, Configuration Management, Penetration Testing and Ethical Hacking