Security threats Toolkit
Story: Microsoft patches four security flaws
Great to have the patches but which of my systems actually need patching?
Microsoft are really serving the customers well in providing a predictable 'patch tuesday' issue of patches, and this report certainly provides us excellent guidance on the issues behind the patches. But how do I quickly identify which of my systems need patching?
We know that any computer that is exposed to the internet, any unsanctioned applications, or unprotected storage devices can be infected with viruses, Trojans, worms, keyloggers, spyware, rootkits, and other malware - often as a result of unknown vulnerabilities.
By preying upon such vulnerabilities in operating systems and applications – from ubiquitous internet browsers to email and office productivity suites – these infections can quickly lead to stolen data, disrupted operations, and threats to the privacy of customers and employees. In 2007 alone, well over 6,000 new vulnerabilities were reported, an average of 124 per week. Nearly 90% of those vulnerabilities could be exploited remotely. In addition, poorly installed or misconfigured devices can create vulnerabilities that allow data corruption, eavesdropping, and theft.
As vulnerabilities can be found literally everywhere – from gateways and routers to DNS servers, web servers, desktops, and laptops – many IT departments run a “catch as catch can” defense. But using swarms of IT personnel to constantly hunt down vulnerabilities, figure out and then apply the appropriate patches, and hope for the best is a waste of resources.
Automating the vulnerability management lifecycle – discovery, assessment, prioritisation, remediation, and reporting – lets you keep your information resources safe from external threats around the clock, freeing IT personnel to work on business-focused projects.
Full Talkback thread
