-
Feb 2021 patches so far
We are still in watch and wait mode for February updates. I’ll be waiting and testing and let you know what we find.
So far I don’t see 1909’s being offered up today’s security update. For those of you on 1909 are you seeing that as well?
For those of you that are business patchers here are some links to follow:
Microsoft Windows Security Updates February 2021 overview – gHacks Tech News
Zero Day Initiative — The February 2021 Security Update Review
Microsoft February 2021 Patch Tuesday (sans.edu)
The zero day bug that I talked about yesterday is an elevation of privilege bug.
The other bug that everyone is buzzing about is this one: Multiple Security Updates Affecting TCP/IP: CVE-2021-24074, CVE-2021-24094, and CVE-2021-24086 – Microsoft Security Response Center “Customers might receive a blue screen on any Windows system that is directly exposed to the internet with minimal network traffic.”
For you and I, I don’t see this one has being horrific. Blue screens of death while not something any of us want, doesn’t mean that the attacker has gotten our data. And we normally do not have our machines straight on the Internet but rather behind routers and firewalls. For now, just make sure you have a backup and look for the full analysis in this week’s Plus newsletter.
Action plan as of right now:
- Waiting/Backing up mode for home users.
- Testing mode for business users.
Note: They’ve released the .NET patch with a known crashing issue February 9, 2021-KB4601050 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2 (microsoft.com) that impacts Visual Studio