Close
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
Read Down
Sign in
Close
Welcome!Log into your account
Forgot your password?
Read Down
Password recovery
Recover your password
Close
Search
Logo
Logo
  • Latest News
  • Big Data and Analytics
  • Cloud
  • Networking
  • Cybersecurity
  • Applications
  • IT Management
  • Storage
  • Sponsored
  • Mobile
  • Small Business
  • Development
  • Database
  • Servers
  • Android
  • Apple
  • Innovation
  • Blogs
  • PC Hardware
  • Reviews
  • Search Engines
  • Virtualization
More
    Home Cybersecurity
    • Cybersecurity
    • Database
    • IT Management

    Microsoft, Oracle Patches Lead Security Week

    By
    Brian Prince
    -
    October 17, 2010
    Share
    Facebook
    Twitter
    Linkedin

      It was a week of patches that are sure to create some extra work for administrators.

      Microsoft broke its record for the most patches ever Oct. 12, releasing a total of 16 security bulletins to fix 49 vulnerabilities across its products. One of the fixes patched a zero-day issue exploited by the Stuxnet worm. According to security pros, the most critical updates, however, were the Internet Explorer bulletin and a bulletin covering a vulnerability in the Embedded OpenType Font Engine.

      Not to be outdone, Oracle pushed out its final update of the year with 85 security fixes. Of the 85, 33 are focused on the Oracle applications suites, with the breakdown as follows: six for Oracle e-Business, two for Oracle Supply Chain products, 21 for the Oracle PeopleSoft and JDEdwards suite, and four for the Oracle Siebel suite.

      Thirty-one of the vulnerabilities affect the Oracle Sun product suite (Solaris), including 11 Oracle classified as remotely exploitable. There are also eight fixes for Oracle Fusion Middleware, seven for the Oracle database, one in Oracle Enterprise Manager Grid Control, one in the Oracle Primavera suite and four for Oracle VM.

      “This process should not be taken lightly,” said Amichai Shulman, co-founder and CTO of Imperva. “For many organizations, the process of patching lasts a few months-mainly between three to six months. DBAs [database administrators], system and IT admins, developers-all these play a role in the patching process. As resources and time are constrained, servers are left vulnerable for months after the release of a patch. Of course, the addition of more patches to different parts of the system-such as when MS patches pertain to servers-just adds complexity to the patching process.”

      Facebook appeared in the security news again this week, this time with a new feature meant to protect user passwords. Facebook is gradually rolling out the ability to text a one-time password to users concerned about working on machines other than their normal computers, such as public computers in hotels, cafes or airports.

      “Simply text ‘otp’ to 32665 on your mobile phone, and you’ll immediately receive a password that can be used only once and expires in 20 minutes,” blogged Jake Brill, product manager for Facebook’s integrity team. “In order to access this feature, you’ll need a mobile phone number in your account. We’re rolling this out gradually, and it should be available to everyone in the coming weeks.”

      Officials at McAfee, meanwhile, discussed their “Security Connected” vision, outlining integration and management plans across its portfolio. In addition, Microsoft released an update Security Intelligence Report that named the United States as home base for more than 2 million bot-infected PCs, while Sophos reported the United States had retained its title as the top spam-relaying nation in the world.

      Rounding out the news, the Lower Merion School District agreed to settle litigation alleging it had used Webcams to spy on students. The district settled the matter for $610,000, ending several months of legal wrangling.

      Brian Prince

      MOST POPULAR ARTICLES

      Big Data and Analytics

      Alteryx’s Suresh Vittal on the Democratization of...

      James Maguire - May 31, 2022 0
      I spoke with Suresh Vittal, Chief Product Officer at Alteryx, about the industry mega-shift toward making data analytics tools accessible to a company’s complete...
      Read more
      Cybersecurity

      Visa’s Michael Jabbara on Cybersecurity and Digital...

      James Maguire - May 17, 2022 0
      I spoke with Michael Jabbara, VP and Global Head of Fraud Services at Visa, about the cybersecurity technology used to ensure the safe transfer...
      Read more
      Applications

      Cisco’s Thimaya Subaiya on Customer Experience in...

      James Maguire - May 10, 2022 0
      I spoke with Thimaya Subaiya, SVP and GM of Global Customer Experience at Cisco, about the factors that create good customer experience – and...
      Read more
      Big Data and Analytics

      GoodData CEO Roman Stanek on Business Intelligence...

      James Maguire - May 4, 2022 0
      I spoke with Roman Stanek, CEO of GoodData, about business intelligence, data as a service, and the frustration that many executives have with data...
      Read more
      Cloud

      Yotascale CEO Asim Razzaq on Controlling Multicloud...

      James Maguire - May 5, 2022 0
      Asim Razzaq, CEO of Yotascale, provides guidance on understanding—and containing—the complex cost structure of multicloud computing. Among the topics we covered:  As you survey the...
      Read more
      Logo

      eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site’s focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

      Facebook
      Linkedin
      RSS
      Twitter
      Youtube

      Advertisers

      Advertise with TechnologyAdvice on eWeek and our other IT-focused platforms.

      Advertise with Us

      Menu

      • About eWeek
      • Subscribe to our Newsletter
      • Latest News

      Our Brands

      • Privacy Policy
      • Terms
      • About
      • Contact
      • Advertise
      • Sitemap
      • California – Do Not Sell My Information

      Property of TechnologyAdvice.
      © 2022 TechnologyAdvice. All Rights Reserved

      Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.

      ×