Menu
Windows 10 gets its first set of security patches

Windows 10 gets its first set of security patches

Microsoft's Patch Tuesday for August contains critical patches for Windows, Internet Explorer and Microsoft Office

Released almost two weeks ago, the new Windows 10 operating system already has its first set of security patches.

For August, Microsoft's monthly round of security patches contains five bulletins that cover Windows 10, as well as a bulletin that covers the new Edge browser that runs on Windows 10.

Overall, Microsoft released 14 security bulletins for this month's Patch Tuesday -- which occurs on the second Tuesday of each month.

Three of the bulletins were marked as critical, meaning that they should be patched as quickly as possible. A bulletin typically contains a set of patches for a single set of software products, such as all the supported versions of Windows.

Windows 10 seems to be off to a solid start as far as being engineered for security, noted Wolfgang Kandek, chief technology officer for IT security firm Qualys. He noted that 40 percent of the generic Windows patches this month apply to Windows 10. By comparison, Windows 8 generated 60 percent of all the generic Windows patches then being issued in the first two months after that OS was released.

The three critical bulletins this month, MS15-079, MS15-80, and MS15-81, cover vulnerabilities in Windows, Internet Explorer, and Microsoft Office.

The critical bulletin for Office, MS15-081, is a rarity, in that critical bulletins are not usually issued for that software suite. The bulletin addresses a flaw that could allow an attacker to gain control of the machine by tricking the user into opening a maliciously crafted Word document.

Microsoft has noticed that this flaw is already being exploited by attackers.

There are a number of other bulletins that, though not marked as critical, administrators may want to take a close look at quickly anyway, Kandek advised.

One is MS15-085, which would allow an attacker to use a USB drive to gain entry to a system. The attacker could plant code on the drive that would activate when the drive is inserted into a computer. This vulnerability is also already being exploited by attackers.

Another bulletin, MS15-083, might be of critical importance for those still running Windows 2008 or Windows Vista. Shops using this software to run network file sharing services with the SMB (Small Message Block) protocol should apply this patch as soon as possible, Kandek said.

Joab Jackson covers enterprise software and general technology breaking news for The IDG News Service. Follow Joab on Twitter at @Joab_Jackson. Joab's e-mail address is Joab_Jackson@idg.com


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Tags patchesMicrosoftsecurity

Featured

Slideshows

Kiwi channel comes together for another round of After Hours

Kiwi channel comes together for another round of After Hours

The channel came together for another round of After Hours, with a bumper crowd of distributors, vendors and partners descending on The Jefferson in Auckland. Photos by Maria Stefina.​

Kiwi channel comes together for another round of After Hours
Consegna comes to town with AWS cloud offerings launch in Auckland

Consegna comes to town with AWS cloud offerings launch in Auckland

Emerging start-up Consegna has officially launched its cloud offerings in the New Zealand market, through a kick-off event held at Seafarers Building in Auckland.​ Founded in June 2016, the Auckland-based business is backed by AWS and supported by a global team of cloud specialists, leveraging global managed services partnerships with Rackspace locally.

Consegna comes to town with AWS cloud offerings launch in Auckland
Veritas honours top performing trans-Tasman partners

Veritas honours top performing trans-Tasman partners

Veritas honoured its top performing partners across the channel in Australia and New Zealand, recognising innovation and excellence on both sides of the Tasman. Revealed under the Vivid lights in Sydney, Intalock claimed the coveted Partner of the Year 2017 (Pacific) award, with Data#3 acknowledged for 12 months of strong growth across the market. Meanwhile, Datacom took home the New Zealand honours, with Global Storage and Insentra winning service provider and consulting awards respectively. Dicker Data was recognised as the standout distributor of the year, while Hitachi Data Systems claimed the alliance partner award. Photos by Bob Seary.

Veritas honours top performing trans-Tasman partners
Show Comments