Sophos and Windows 7 Updates Incompatible

By bmhumeNews, Patch Management

Sophos and Windows 7 Updates Incompatible

Reports indicate Sophos Endpoint Antivirus is incompatible with the latest updates for Windows 7, causing a total crash on the log on screen or BSOD.

Sophos Endpoint Antivirus is a hybrid antivirus solution that provides businesses protection against malware, viruses and offers a remote management tool. Regrettably, there are reports that it is not compatible with the latest Windows updates for Windows 7 causing either a total crash on the logon screen or BSOD.

The issue occurs with the following Microsoft updates:

KB4493446
KB4493448
KB4493450
KB4493451
KB4493458
KB4493467
KB4493471
KB4493472

Robert Brown, Director of Services for Verismic said, “We have learned Sophos recommends immediately removing these updates from your active deployments, and if already deployed to remove them swiftly until the issue is resolved. A patch is not yet available, but to make things easier our customers can search for these updates in Syxsense and easily remove them without causing any further end user disruption.”

Start a Free Trial

Try Syxsense today and start patching your IT environment with a powerful and easy-to-use IT management toolset.

Schedule Your Syxsense Demo

Syxsense combines IT management, patch management, and security vulnerability scanning in one powerful solution. Get started today.

Schedule My Demo

April 18, 2019

Love0

Thank You For Not Patching

By bmhumeNews, Patch Management

Thank You For Not Patching

New studies show how patching continues to impact most organizations with real consequences.

Nearly 60% of organizations that suffered a data breach in the past two years cite as the culprit a known vulnerability for which they had not yet patched.

Half of organizations in a new Ponemon Institute study conducted on behalf of ServiceNow say they were hit with one or more data breaches in the past two years, and 34% say they knew their systems were vulnerable prior to the attack. The study surveyed nearly 3,000 IT professionals worldwide on their patching practices.

Patching software security flaws by now should seem like a no-brainer for organizations, yet most organizations still struggle to keep up with and manage the process of applying software updates. “Detecting and prioritizing and getting vulnerabilities solved seems to be the most significant thing an organization can do [to prevent] getting breached,” says Piero DePaoli, senior director of marketing at ServiceNow, of the report.

“Once a vulnerability and patch are announced, the race is on,” he says. “How fast can a hacker weaponize it and take advantage of it” before organizations can get their patches applied, he says.

Get started with Syxsense to elevate your approach to IT patch management and protect your business from major vulnerabilities and threats.

Start a Free Trial

Try Syxsense today and start patching your IT environment with a powerful and easy-to-use IT management toolset.

Schedule Your Syxsense Demo

Syxsense combines IT management, patch management, and security vulnerability scanning in one powerful solution. Get started today.

Schedule My Demo

April 17, 2019

Love0

Microsoft Patch Tuesday Updates Are Freezing Windows

By bmhumeNews, Patch Management, Patch Tuesday

Microsoft Patch Tuesday Updates Are Freezing Windows

If you installed the latest round of Microsoft patches and found that your computer experienced errors or started to freeze, you are not alone.

What’s occurring and which versions are affected?

Microsoft has confirmed that computers are freezing during the latest “Patch Tuesday” update process. However, the issue could be more prevalent than Microsoft is stating.

Microsoft has indicated that there is “an issue on devices with Sophos Endpoint Protection installed and managed by either Sophos Central or Sophos Enterprise Console (SEC) that may cause the system to freeze or hang upon restart after installing this update.” Users of Avast for Business and CloudCare have reported freezing upon startup and Avira antivirus users are experiencing slow devices.

The security update in question includes fixes that were part of KB4489892. It was primarily meant to provide further mitigations against Spectre and Meltdown, but included other improvements as well.

It appears that a large number of Windows versions are affected by the update problems, including Windows 7, Windows 8.1, Windows Embedded 8, Windows Server 2008, Windows Server 2012, Windows Server 2012 R2 and Windows 10.

How do you fix it?

If the Sophos Endpoint is installed, Microsoft has temporarily blocked devices from receiving these updates until a solution is available. However, there is no confirmation of the problems that Avast and Avira users are facing—only Sophos.

If you have installed the Patch Tuesday updates and need to fix them, we highly recommend rolling back the updates in question.

Start a Free Trial

Try Syxsense today and start patching your IT environment with a powerful and easy-to-use IT management toolset.

Schedule Your Syxsense Demo

Syxsense combines IT management, patch management, and security vulnerability scanning in one powerful solution. Get started today.

Schedule My Demo

April 13, 2019

Love0

Patch Tuesday? More Like Patch Doomsday

By bmhumeNews, Patch Management, Patch Tuesday

August Patch Tuesday Release

Microsoft have released 60 security patches today covering Internet Explorer (IE), Edge, ChakraCore, Windows components, .NET Framework, SQL Server, as well as Microsoft Office and Office Services.

Out of these 60 CVEs, 19 are listed as Critical, 39 are rated Important, one is rated as Moderate, and one is rated as Low in severity.

Critical Adobe Updates

Adobe have also released 11 fixes today including two critical patches for Acrobat and Reader, CVE-2018-12808 is an out-of-bounds write flaw, while CVE-2018-12799 is an untrusted pointer dereference vulnerability. IT Managers should be pleased as last month’s release included 100 vulnerability fixes.

WannaCry is Back with a Vengeance

Big hitter falls foul of WannaCry this week; Taiwan Semiconductor Manufacturing who are the largest chip supplier to Apple and other smartphone makers were compromised which disrupted global delays of chip shipments. The damage from the infection has caused serious financial revenue damage in Q3, and could have easily been avoided should a patch centric approach been adopted by their IT Managers. Learn more in our Avoiding Patch Doomsday whitepaper.

Windows 10 Feature Update Planning

If you are using Windows 10, version 1703 then you only have 2 months left to upgrade before it falls out of the standard ‘End of Service’ on October 9, 2018. Each Windows 10 version will be serviced with quality updates for up to 18 months from availability. It is important that all quality updates are installed to help keep your device secure.

Robert Brown, Director of Services for Verismic said, “CVE-2018-8373 (Scripting Engine Memory Corruption Vulnerability) & CVE-2018-8414 (Windows Shell Remote Code Execution Vulnerability) are both publicly disclosed and are actively being exploited.

Although these only carry a CVSS score of 4.8 & 6.7 respectively because these vulnerabilities are being actively being used to expose customer networks, these updates should be prioritized by your IT manager this month.

Patch Tuesday Release

CVE	Title	Severity
CVE-2018-8373	Internet Explorer Memory Corruption Vulnerability	Critical
CVE-2018-8273	Microsoft SQL Server Remote Code Execution Vulnerability	Critical
CVE-2018-8302	Microsoft Exchange Memory Corruption Vulnerability	Critical
CVE-2018-8344	Microsoft Graphics Remote Code Execution Vulnerability	Critical
CVE-2018-8345	LNK Remote Code Execution Vulnerability	Critical
CVE-2018-8350	Windows PDF Remote Code Execution Vulnerability	Critical
CVE-2018-8355	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8359	Scripting Engine Information Disclosure Vulnerability	Critical
CVE-2018-8371	Internet Explorer Memory Corruption Vulnerability	Critical
CVE-2018-8372	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8377	Microsoft Edge Memory Corruption Vulnerability	Critical
CVE-2018-8380	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8381	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8384	Chakra Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8385	Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8387	Microsoft Edge Memory Corruption Vulnerability	Critical
CVE-2018-8390	Scripting Engine Memory Corruption Vulnerability	Critical
CVE-2018-8397	GDI+ Remote Code Execution Vulnerability	Critical
CVE-2018-8403	Microsoft Browser Memory Corruption Vulnerability	Critical
CVE-2018-8414	Windows Shell Remote Code Execution Vulnerability	Important
CVE-2018-0952	Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability	Important
CVE-2018-8200	Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	Important
CVE-2018-8204	Device Guard Code Integrity Policy Security Feature Bypass Vulnerability	Important
CVE-2018-8253	Cortana Elevation of Privilege Vulnerability	Important
CVE-2018-8266	Chakra Scripting Engine Memory Corruption Vulnerability	Important
CVE-2018-8316	Internet Explorer Remote Code Execution Vulnerability	Important
CVE-2018-8339	Windows Installer Elevation of Privilege Vulnerability	Important
CVE-2018-8340	ADFS Security Feature Bypass Vulnerability	Important
CVE-2018-8341	Windows Kernel Information Disclosure Vulnerability	Important
CVE-2018-8342	Windows NDIS Elevation of Privilege Vulnerability	Important
CVE-2018-8343	Windows NDIS Elevation of Privilege Vulnerability	Important
CVE-2018-8346	LNK Remote Code Execution Vulnerability	Important
CVE-2018-8347	Windows Kernel Elevation of Privilege Vulnerability	Important
CVE-2018-8348	Windows Kernel Information Disclosure Vulnerability	Important
CVE-2018-8349	Microsoft COM for Windows Remote Code Execution Vulnerability	Important
CVE-2018-8351	Microsoft Edge Information Disclosure Vulnerability	Important
CVE-2018-8353	Scripting Engine Memory Corruption Vulnerability	Important
CVE-2018-8357	Internet Explorer Elevation of Privilege Vulnerability	Important
CVE-2018-8358	Microsoft Edge Information Disclosure Vulnerability	Important
CVE-2018-8360	.NET Framework Information Disclosure Vulnerability	Important
CVE-2018-8370	Microsoft Edge Information Disclosure Vulnerability	Important
CVE-2018-8375	Microsoft Excel Remote Code Execution Vulnerability	Important
CVE-2018-8376	Microsoft PowerPoint Remote Code Execution Vulnerability	Important
CVE-2018-8378	Microsoft Office Information Disclosure Vulnerability	Important
CVE-2018-8379	Microsoft Excel Remote Code Execution Vulnerability	Important
CVE-2018-8382	Microsoft Excel Information Disclosure Vulnerability	Important
CVE-2018-8383	Microsoft Edge Spoofing Vulnerability	Important
CVE-2018-8389	Internet Explorer Memory Corruption Vulnerability	Important
CVE-2018-8394	Windows GDI Information Disclosure Vulnerability	Important
CVE-2018-8396	Windows GDI Information Disclosure Vulnerability	Important
CVE-2018-8398	Windows GDI Information Disclosure Vulnerability	Important
CVE-2018-8399	Win32k Elevation of Privilege Vulnerability	Important
CVE-2018-8400	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Important
CVE-2018-8401	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Important
CVE-2018-8404	Win32k Elevation of Privilege Vulnerability	Important
CVE-2018-8405	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Important
CVE-2018-8406	DirectX Graphics Kernel Elevation of Privilege Vulnerability	Important
CVE-2018-8412	Microsoft (MAU) Office Elevation of Privilege Vulnerability	Important
CVE-2018-8374	Microsoft Exchange Elevation of Privilege Vulnerability	Moderate
CVE-2018-8388	Microsoft Edge Elevation of Privilege Vulnerability	Low

Schedule Your Syxsense Demo

Syxsense combines IT management, patch management, and security vulnerability scanning in one powerful solution. Get started today.

Schedule My Demo

August 14, 2018

Love0

patch news