Patch Tuesday: Microsoft Updates IE, RDP, Certificate Tool

Microsoft released seven security bulletins addressing 26 unique vulnerabilities in Microsoft Windows, Internet Explorer, and other applications as part of June's Patch Tuesday release on June 12. The company separately announced changes to its automatic updater to block untrusted security certificates. Microsoft updated the updater tool after researchers at Kaspersky Lab uncovered how the Flame malware had gamed the process.

The new automatic updater feature provides a mechanism that allows Windows to specifically flag certificates as untrusted. In August, Microsoft is also planning to release a change to how Windows manages certificates that have RSA keys of less than 1024 bits in length.

Microsoft admitted that one of the baker's dozen was already being exploited by hackers, raising the importance of applying the update immediately.

"Microsoft is aware of limited attacks attempting to exploit the vulnerability," stated the company's advisory, which divulged no other details of the ongoing exploits. The vulnerability affects only IE8, the 2009 version that remains the most widely used version of Microsoft's browser.

Read more -here-

• Google, Meta, Apple receive FCC approval to tap into airwaves for VR and AR
• State-sponsored hackers are leveraging WinRAR bug
• Amazon launches drug delivery by drone
• Unpatched Zero-Day being exploited in the wild, Cisco warns
• Apple plans to update iPhones in-store without opening the boxes
• Microsoft just bought Activision Blizzard for $69 billion