The first Microsoft patches of 2007
Full article278 words · extracted from securelist.com · click to collapse
Later today Microsoft will release its latest security patches. These will include a Critical update for Windows and three others for Office (the highest of which will also be Critical). You can find the notifications in the usual place.
The use of unpatched vulnerabilies continues to be a significant part of the cyber threat landscape and, unsurprisingly, has kept Microsoft busy during 2006, as the table below shows.
| Critical | Important | Moderate | |
| January 2006 | 3 | – | – |
| February 2006 | 2 | 5 | – |
| March 2006 | 1 | 1 | – |
| April 2006 | 3 | 1 | 1 |
| May 2006 | 2 | 1 | – |
| June 2006 | 8 | 3 | 1 |
| July 2006 | 5 | 2 | – |
| August 2006 | 9 | 3 | – |
| September 2006 | 2 | 1 | 1 |
| October 2006 | 6 | 1 | 2 |
| November 2006 | 5 | 1 | – |
| December 2006 | 3 | 4 | – |
We hope that the release of Windows Vista will mean less patches, but since current systems will be with us for some time to come, we’ll need to remain on our guard to stay secure.
Latest Webinars
Reports
Kaspersky researchers have discovered new Mirage Kitten attacks using previously undocumented malware families: NodeRabbit in Node.js and PollCat in JavaScript.
Our experts discovered a new CoolClient backdoor variant with a kernel-mode rootkit driver that hides malicious processes, files, and network connections from security tools and threat analysts.
Kaspersky experts break down a new Armored Likho campaign that poses as a fundraising efforts and delivers a new Still Toolkit aimed at stealing Telegram data and eavesdropping on victims.
Kaspersky researchers reveal previously undocumented malware attributed to Mirage Kitten (UNC1549, Smoke Sandstorm, Nimbus Manticore): NightLedger backdoor, ArcBridge, and BridgeHead tunneling tools.
Text extracted automatically; images, tables and formatting may be missing. Original: https://securelist.com/the-first-microsoft-patches-of-2007/30279/