Microsoft's Patch Tuesday features IE8 zero-day fix

May 11, 2013

Microsoft last week said it will issue ten security updates next week, two of them rated "critical," to patch 34 vulnerabilities, including the zero-day bug that has been used by cyber criminals to poison "watering hole" websites in attacks aimed at U.S. government workers. "IE is always critical, and we expected at least one update this month," said Andrew Storms, director of security operations at Tripwire's nCircle Security, in an interview. "What was surprising was the IE8 fix." The remaining eight updates, called "bulletins" by Microsoft, were pegged as "important" on the firm's threat scale, and will provide patches for Windows, several applications in the Office family and for multiple communications products, including Lync, Microsoft's enterprise-grade instant messaging platform. Three of the Windows security updates will affect Windows 8 and Windows RT, Microsoft's newest operating systems; one of the trio will patch only those two editions. To read this article in full or to leave a comment, please click here

Link: http://www.pcworld.com/article/2038473/microsofts-patch-tuesday-features-ie8-zero-day-fix.html#tk.rss_all