Newsletter Archives

• Closing the year on patching

  Posted on December 18, 2023 at 02:42 CST by Susan Bradley • Comment in the Forums

  PATCH WATCH

  

  By Susan Bradley

  We need a little Copilot, now.

  I have a favorite Christmas song called “We Need a Little Christmas” (now). That comes to my mind because for those of you who want to partake in the artificial intelligence experiment know as Windows Copilot, you may end up humming the slightly modified song “I Need a Little Copilot” (now).

  The December updates start to bring Copilot into Windows 10. I say “start” because, like many things in Microsoftland, features and changes are no longer released en masse to everyone in the form of a service pack. Instead, the changes are dribbled out or limited to certain geographical areas.

  Read the full story in our Plus Newsletter (20.51.0, 2023-12-18).

  Patch Watch Apple, BitLocker, CVE-2023-20275, CVE-2023-35628, CVE-2023-35636, KB5008383, KB5025885, Newsletters, NTLM, Patch Lady Posts, VPN, Windows Copilot, Zero Day

• We need a little December Copilot

  Posted on December 12, 2023 at 12:48 CST by Susan Bradley • Comment in the Forums

  Well…. some of us want the present of Copilot and some of us would rather get that gift after the bugs get worked out.  Once again we have the December updates – the LAST updates to be installed for 2023.  Remember we are in test and watch out for issues mode right now.

  To see what changes are coming to Windows 10 you can check out the details in the November 30 preview update.

  I’ll be researching and documenting the side effects on the Master Patch list. In the meantime if you have an Ipad or iphone, especially an older version, ensure you update it ASAP for zero day patches out yesterday.

  This is a small release month.  Four critical bugs, 29 important. NO zero days (unlike Apple)

  Two of them look prime for being abused by Ransomware actors, the MSHTML bug of CVE-2023-35628 and the Outlook bug of CVE-2023-35636 both look like attackers will use these to allow remote unauthenticated attackers to use email as a vector to gain more access as well as disclose NTLM hashes.

  Windows Patches/Security CVE-2023-35628, CVE-2023-35636, Patch Lady Posts