<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>mcwresearch.com &#187; Patch-Tuesday</title>
	<atom:link href="http://mcwresearch.com/archives/category/patch-tuesday/feed" rel="self" type="application/rss+xml" />
	<link>http://mcwresearch.com</link>
	<description>Things I think I've thought about</description>
	<lastBuildDate>Mon, 28 Dec 2009 22:10:04 +0000</lastBuildDate>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
<xhtml:meta xmlns:xhtml="http://www.w3.org/1999/xhtml" name="robots" content="noindex" />
		<item>
		<title>MS08-001</title>
		<link>http://mcwresearch.com/archives/600</link>
		<comments>http://mcwresearch.com/archives/600#comments</comments>
		<pubDate>Fri, 01 Feb 2008 16:33:26 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[MS08-001]]></category>
		<category><![CDATA[Remote Kernel Attack]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/600</guid>
		<description><![CDATA[Am I being Chicken Little in thinking that remote kernel attacks such as one leveraging the MS08-001 vulnerability will be the next chapter in the arms race between hackers and network defenders? Alex Wheeler, one of the two responsible for discovering and researching the vulnerability said this; &#8220;This is a severe vulnerability across the board. [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/600/feed</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>My Black Tuesday Routine</title>
		<link>http://mcwresearch.com/archives/555</link>
		<comments>http://mcwresearch.com/archives/555#comments</comments>
		<pubDate>Wed, 10 Oct 2007 16:20:52 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Intrusion Detection/Prevention]]></category>
		<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[IPS]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/555</guid>
		<description><![CDATA[I&#8217;ve spent the last two or three years focusing the lion&#8217;s share of my security energy on implementing proactive measures to reduce our dependence on Microsoft patches. To wit, here is what my Black Tuesday routine looks like: Tuesday &#8211; I usually wait for the ISC to publish their overview, which is easily digested. I [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/555/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I *heart* my IPS</title>
		<link>http://mcwresearch.com/archives/456</link>
		<comments>http://mcwresearch.com/archives/456#comments</comments>
		<pubDate>Thu, 12 Apr 2007 20:13:42 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Intrusion Detection/Prevention]]></category>
		<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/456</guid>
		<description><![CDATA[Last year I vowed to do whatever I could to get myself weaned off as much dependence on Microsoft patches as I could. To wit; I started purchasing IPS and UTM devices for our offices. The main offices got the IPS units behind the beefcake firewalls and the satellite offices got UTM devices in lieu [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/456/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Microsoft released the out-of-cycle patch; MS06-055</title>
		<link>http://mcwresearch.com/archives/315</link>
		<comments>http://mcwresearch.com/archives/315#comments</comments>
		<pubDate>Tue, 26 Sep 2006 21:42:45 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Rant]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/315</guid>
		<description><![CDATA[I think this is the last I blog of this nonsense. Hopefully by now I&#8217;ve gotten the point across that if you are depending on vendor patches as your primary means of security, you deserve to be sweating things like this. I&#8217;m cranky.]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/315/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Microsoft hinting at an out-of-cycle patch</title>
		<link>http://mcwresearch.com/archives/311</link>
		<comments>http://mcwresearch.com/archives/311#comments</comments>
		<pubDate>Fri, 22 Sep 2006 19:52:52 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Rant]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/311</guid>
		<description><![CDATA[From Microsoft&#8217;s Security Response Center blog: Weâ€™ve made some progress in our testing pass for the update and are now evaluating releasing this outside the monthly cycle, as we do any time customers are under threat and we believe we can issue an update that meets our quality bar for widespread deployment. So right now [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/311/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Yet Another Third Party Patch</title>
		<link>http://mcwresearch.com/archives/309</link>
		<comments>http://mcwresearch.com/archives/309#comments</comments>
		<pubDate>Fri, 22 Sep 2006 17:57:55 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Rant]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/309</guid>
		<description><![CDATA[It was inevitable. A third party (ZERT) has issued a patch for the VML vulnerability in IE. I can&#8217;t recommend this patch because I haven&#8217;t tested it nor do I know anything about ZERT. However, this does emphasize the severity of this vulnerability. Its frustrating to me that with an application as widely distributed and [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/309/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>&#8220;Just switch to firefox&#8221; isn&#8217;t yet a viable solution</title>
		<link>http://mcwresearch.com/archives/306</link>
		<comments>http://mcwresearch.com/archives/306#comments</comments>
		<pubDate>Tue, 19 Sep 2006 19:20:56 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Rant]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/306</guid>
		<description><![CDATA[There is yet another zero-day exploit for IE (the second within four days). We&#8217;re two weeks away from Microsoft&#8217;s next patch cycle and I&#8217;ll bet dollars to donuts we won&#8217;t see a patch before then. What options does an enterprise have in these cases? Recommending that the enterprise as a whole switches completely to a [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/306/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I&#8217;m baaaaack</title>
		<link>http://mcwresearch.com/archives/276</link>
		<comments>http://mcwresearch.com/archives/276#comments</comments>
		<pubDate>Fri, 18 Aug 2006 15:44:41 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/276</guid>
		<description><![CDATA[Yes, its been over a week since my last blog entry. I&#8217;ve been fairly pre-occupied and haven&#8217;t had much time to blog, as I&#8217;ve been supporting offices in other time-zones (thing GMT and GMT+, not EST or PST) But now I&#8217;m back and ready to get on with boring people to death. First thing I [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/276/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>MS06-040 (have you patched yet?)</title>
		<link>http://mcwresearch.com/archives/274</link>
		<comments>http://mcwresearch.com/archives/274#comments</comments>
		<pubDate>Fri, 11 Aug 2006 03:45:41 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/274</guid>
		<description><![CDATA[I have a post sitting in my &#8216;drafts&#8217; section, in which I ramble on about why we&#8217;re forced to patch like a bunch of sheep once a month. That post might take a while because I keep having to edit it for rants to keep it concise and on point. In the meantime, as much [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/274/feed</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Pay It Forward: Unorthodox patching techniques</title>
		<link>http://mcwresearch.com/archives/272</link>
		<comments>http://mcwresearch.com/archives/272#comments</comments>
		<pubDate>Wed, 09 Aug 2006 15:26:58 +0000</pubDate>
		<dc:creator>Michael</dc:creator>
				<category><![CDATA[Patch-Tuesday]]></category>
		<category><![CDATA[Security]]></category>
		<category><![CDATA[Security Tips]]></category>

		<guid isPermaLink="false">http://mcwresearch.com/archives/272</guid>
		<description><![CDATA[Yes, &#8216;pay it forward&#8217; was originally a week-long deal, but it is a lot of fun and turned out to be pretty successful so I&#8217;ve made it a permanent fixture of the site. This month&#8217;s security bulletins from Microsoft include a bulletin and patch regarding a vulnerability in the Server service. The server service is [...]]]></description>
		<wfw:commentRss>http://mcwresearch.com/archives/272/feed</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>

