Windows

You know that businesses will be able to pay for Win7 security patches after Win7 hits end-of-life on Jan. 14. Many of Microsoft’s Extended Security Update program details aren’t clear to me — How does a very small business buy ESU? Why is Microsoft releasing Edge on Win7 the day after it goes end-of-life? Will that new full-screen nag keep coming back? — but there’s one loose end that sits in the middle of my confusion.

To read this article in full, please click here

Patch Tuesday in December rarely brings anything worthwhile — everybody’s on vacation, or wants to be on vacation — and this month’s no exception. We got patches for 36 separately identified security holes and two new advisories, full of sound and fury but covering very little.

The one “exploited” security hole — CVE-2019-1458 Win32k Elevation of Privilege Vulnerability — shouldn’t cause any heartburn. Microsoft says:

To read this article in full, please click here

The November passel of patches didn’t include anything earth-shattering; there were no emergency security breaches storming the gates, but good patching hygiene dictates that you get your machine braced for the next round.

If you install patches manually one by one (“Group B,” which I don’t recommend for mere mortals), you need to make sure you have the proper Servicing Stack Updates in place. They’ve all changed in the past month.

To read this article in full, please click here