Department of Homeland Security Says "Patch Your Windows Now"

[Mike Labbe]

Patch Windows Now, Homeland Security warns

In an unusual advisory, the U.S. Department of Homeland Security has urged PC users and system administrators to apply this week's patch for Microsoft Windows as soon as possible.

<FONT COLOR="RED">The Department of Homeland Security (DHS) is recommending that Windows Operating Systems users apply Microsoft security patch MS06-040 as quickly as possible. This security patch is designed to protect against a vulnerability that, if exploited, could enable an attacker to remotely take control of an affected system and install programs, view, change, or delete data, and create new accounts with full user rights.

Windows Operating Systems users are encouraged to avoid delay in applying this security patch. Attempts to exploit vulnerabilities in operating systems routinely occur within 24 hours of the release of a security patch. This vulnerability could impact government systems, private industry and critical infrastructure, as well as individual and home users.

Users can apply the Microsoft MS06-040 security patch at THIS LINK . Home user may prefer to go to Windows Update at http://update.microsoft.com and select “express” to install critical security updates, including the MS06-040 security patch.

Source: Department of Homeland Security
</COLOR?></FONT>


Note from Mike: There are software updates for both PC and MAC products from Microsoft. (Windows and Office)

Technically, this should flow right through your normal overnight WINDOWS UPDATE routine and force the PC to reboot. It might be a good opportunity to do an update manually, to make sure things are up to date and working properly.

You can do so by clicking START -> ALL PROGRAMS -> WINDOWS UPDATE (Blue Globe) and follow the instructions there.

Best regards,
Mike

[ 08-10-2006, 06:53 PM: Message edited by: Mike Labbe @ GTP ]

 

[Ron Eggers]

I wondered why my PC restarted during the night. I thought there was a power outage, but I have a UPS, so it would have had to been a long one.

 

[BILL WARD]

sounds like another insidious GOV plot to get us to voluntarily put noxious big-brother sniffers into our lives(in the guise of 'but it's GOOD for you'!!!)---just to keep track of the 'bad' guys, right?????
or maybe it's just another attach of paranoia ...

 

[Bill Henry-]

This looks like the exact CERT advisory issued by Carnegie Mellon last Tuesday and suspiciously like the all of advisories that have seemingly been published about every two weeks for the last few years.

I wonder why the gum’mint is interested in this particular vulnerability and, especially, at this time. Typical – a day short and a dollar late.

My wife went through airport security yesterday. They confiscated her brand new bottle of hand cream (which she bought at the airport’s “Rippoff Newsstand”). Maybe they’re trying to deflect attention for all the foul ups occurring at the screening lines.

… not that I’m a conspiracy theorist or anything.

 

[Mike Labbe]

Homeland Security on Windows Patch a warning to Microsoft

By Stan Beer . itwire.com

Friday, 11 August 2006
The involvement of the US Department of Homeland Security with regard to a newly announced critical vulnerability in Microsoft Windows is a wake up call. The serious nature of cyber attacks on the operating system sitting on most of the world's desktops has reached the level where it is now a matter of national and international concern.

For Microsoft, having a government security agency taking a high profile interest in a serious vulnerability in Windows must be a concern of the highest order.

The flaw outlined in Microsoft's MS06-040 security bulletin is apparently so serious that all Windows versions are affected and users can be hacked just by having their computers switched on and connected to the internet.

Security specialists, including Homeland Security's Computer Emergency Readiness Team (US-CERT), are saying its not a matter of if but when a major attack happens. And when the attack does occur, it could affect government, corporate and private computers around the world.

Exploits for the vulnerability have already been publicly demonstrated that can initiate a denial of service attack and experts are warning that a major worm could well be on the way.

For many users, who pay diligent attention to their patch Tuesday security updates, the expected exploits will be no problem. However, for the myriad of pirate Windows users and users who may only turn on their computers sporadically, a vulnerability of this nature could prove disastrous as exploits, including possible worms, are expected to be just days away.

Obviously, the Department of Homeland Security is concerned enough by the ramifications of having sources of exploits with malicious intent gaining remote access to large numbers of US computer systems to issue a public warning for users to patch their systems immediately.

The Homeland Security alert should also serve as yet another warning to Microsoft to get its security house in order. Hopefully, such gaping holes in the software company's operating system will no longer be discovered with the release of Vista.

 

[deaconsbench]

If no one has said it lately, "Thank You, Mike" for all you do to keep us informed and updated.

My updates are automatic, yet when I ran it manually, there were 7 critical updates that needed to be installed.

Good job, Mike.

 

[Paul N]

Nothing beats scaring the sheeple, sorry, the people when elections are near and the Republicans look really bad n the polls....

Ah, the Windoze update? It is automatic. But I am making it manual now.

 

[Val]

I recently had to go through a metal detector. They confiscated my tape measure. I said "What I am gonna do, measure someone to death?" Guy said I could decapitate someone with it! Gave it back when I left the building. I said "Good job, but you missed my Swiss army knife!"

And I really had fun last week when I had to in again. Man, these new titanium hips really had 'em stumped for a minute, I had to walk through 3 times!! Then I asked if they needed to see my physical proof...(I don't have a "titanium hip registration card" yet.) They let me go through without dropping my drawers. Guy remembered the tape measure incident.