WinInfo Daily UPDATE, December 10, 2003

This Issue Sponsored By

Argent Software


1. In the News
- Happy Holidays? No Monthly Microsoft Critical Security Patch in December

2. Announcement
- Receive a Free Identity Management White Paper!

3. Event
- New--3 Microsoft Security Road Shows!

4. Contact Us
- See this section for a list of ways to contact us.

==== Sponsor: Argent Software ====

Network Testing Labs, one of the world's leading independent research companies, put together a comprehensive Comparison Paper on two leading enterprise monitoring solutions. Their conclusion: "The Argent Guardian easily beats out MOM in all our tests ... The Argent Guardian will cost far less than MOM and yet provide significantly more functionality." Find out for yourself why organizations like Major League Baseball, GE Capital, AT&T, Harley Davidson, and Nokia all rely on The Argent Guardian for their enterprise monitoring and alerting needs. Download this Comparison Paper now:

==== 1. In the News ====
by Paul Thurrott, [email protected]

Happy Holidays? No Monthly Microsoft Critical Security Patch in December
Microsoft alerted systems administrators this week that the company won't issue its monthly critical security patch package in December, a sort of happy holidays gift. But lest anyone get too excited by the implications of this announcement, be aware that Microsoft products currently contain several known security vulnerabilities, and the reason the company isn't issuing a patch package has more to do with timing than anything else. This situation leads to some obvious questions about Microsoft's decision to release monthly patch packages, the first of which appeared in October. What happens when Microsoft internally finalizes security patches just after the date on which patches are supposed to be issued to the public?
"In response to extensive customer feedback, Microsoft is implementing changes in the way security bulletins are released," the company announced earlier this year. "These changes will help enhance the manageability and predictability of the patch-management process for customers. Security bulletins will normally be released on the second calendar Tuesday of every month." However, on the TechNet Web site this week, the company noted: "Microsoft had no security bulletins to release December 9, 2003, as part of its monthly release cycle for December. If the need arises for emergency patches, they will be issued outside the monthly releases."
And the need will likely arise. In addition to the Microsoft Internet Explorer (IE) vulnerabilities that security researchers discovered in late November, Microsoft is investigating the possibility that intruders could use information in an earlier security patch to unleash a Slammer-style attack on Windows. And the company hinted that some fixes are in the works but didn't make the December 9 cutoff date. "We have made a commitment to release \[monthly patch packages\] when we're ready, when we have quality patches," Iain Mulholland, a program manager in Microsoft's Security Business Unit, said. "There is simply nothing that has passed the bar yet from a quality perspective for release in \[the\] December \[package\]."

==== 2. Announcement ====
(from Windows & .NET Magazine and its partners)

Receive a Free Identity Management White Paper!
Are your existing identity-management and access-control solutions fragmented, duplicated, and inefficient? Attend this free Web seminar and discover how to automate and simplify identity creation, administration, and access control. Leverage your investment in Microsoft technologies and benefit from greater security, improved productivity, and better manageability. Register now!

==== 3. Event ====
(brought to you by Windows & .NET Magazine)

New—3 Microsoft Security Road Shows!
Don’t miss out on three new Security Road Show events in December. Join industry guru Mark Minasi, and learn more about tips to secure your Windows Server 2003 and Windows 2000 network. There is no charge for this event, but space is limited, so register today!

==== Sponsored Link ====

Sybari Software
Free! "Admins Shortcut Guide to Email Protection" from Sybari;6574227;8214395;q?


4. ==== CONTACT US ====

About the newsletter -- [email protected]
About technical questions --
About product news -- [email protected]
About your subscription -- [email protected]
About sponsoring UPDATE -- [email protected]


This email newsletter is brought to you by Windows & .NET Magazine, the leading publication for IT professionals deploying Windows and related technologies. Subscribe today.

Manage Your Account
You are subscribed as #EmailAddr#.

To unsubscribe from this email newsletter, send an email message to mailto:#mailing:unsubemail#.

To make other changes to your email account such as change your email address, update your profile, and subscribe or unsubscribe to any of our email newsletters, simply log on to our Email Preference Center.

Copyright 2003, Penton Media, Inc.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.