• MS-DEFCON 3: No rush, but you should get the January Patch Tuesday patches installed

    Usually I wait until near the end of the month before giving the all-clear to install Microsoft’s Patch Tuesday patches.

    This month’s different.

    On the one hand, this month’s patches look pretty darn clean. Part of the reason for our good fortune, I’m convinced, is that we haven’t had any non-security patches since October.

    On the other hand, there’s the looming threat of CurveBall — the CVE-2020-0601 security hole advertised by the NSA. I don’t think CurveBall will hit the mainstream any time soon, but ya never know.

    Putting those together, and I figure now’s a good time for normal folks to get their machines patched.

    I’m only moving to MS-DEFCON 3 this month because it’s still very early in the crowdsourced bug catching phase. If you hit a problem with a patch, let us know loud and clear! But get patched.

    Full step-by-step details in Computerworld Woody on Windows.

    UPDATE: If you’re having installation problems with the Win10 1903 and 1909 cumulative updates, it may be caused by a missing Connect app. See Günter Born’s post.