Patch Tuesday again

This month Microsoft released six security bulletins, three of them rated Critical, three of them rated Important.

The three Critical bulletins are:

1. Vulnerabilities in the Embedded OpenType Font Engine Could Allow Remote Code Execution (961371)
2. Vulnerabilities in Microsoft DirectShow Could Allow Remote Code Execution (971633)
3. Cumulative Security Update of ActiveX Kill Bits (973346)

The three Important bulletins are:

1. Vulnerability in Virtual PC and Virtual Server Could Allow Elevation of Privilege (969856)
2. Vulnerability in Microsoft ISA Server 2006 Could Cause Elevation of Privilege (970953)
3. Vulnerability in Microsoft Office Publisher Could Allow Remote Code Execution (969516)

You can find more information here on the Microsoft site.

Here’s a summary of the patches released so far in 2009:

The use of unpatched vulnerabilities continues to be a significant part of the threat landscape, so it’s important to make sure you patch your systems. Remember you can use Windows Automatic Updates to automate this process.

Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.

Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.

Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.

Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.