Home > Midmarket IT Security Tips > > When Patch Tuesday is patchless
Midmarket IT Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 


When Patch Tuesday is patchless


Serdar Yegulalp
02.05.2009
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


The second Tuesday of each month is Microsoft's official day for rolling out that month's patches -- security fixes, updates, and other upgrades to Windows and other Microsoft products. But what if Patch Tuesday comes and goes, and there's nothing new under the sun from Redmond? In that case, there are still things you can do that'll help keep you up to speed.

  1. Check for Microsoft patches that aren't released through Windows Update. If you're running Microsoft server products like Exchange and SQL Server, the updates for those products aren't released through Windows Update -- you'll need to go to the sites for those products and check for updates by hand. This may seem cumbersome, but it's by design: since many people may depend on such services, it's best to stop and upgrade them only after the people using them get sufficient notice. Having this happen automatically would be disruptive at best! Since not everyone who runs Windows runs them, notification for updates to those products is completely separate by design, too.

  2. Check for Office updates if you're running Microsoft Office. Updates to Office 2003 are provided through Microsoft Update, but not for other versions of Office. Those will need to be checked for by hand, through the Office Update site.

    ((Content component not found.))

  3. Check for updates to non-Microsoft applications. It's almost a given that there would be programs from vendors other than Microsoft in your organization. Such updates would fall into roughly five categories:
    1. Regular programs that don't have their own updaters. Some third-party vendors such as Symantec have an update mechanism for their programs, but some don't -- especially commonly-used freeware applications that need to be rolled out by hand.
    2. Device drivers not found through Windows Update, such as on-board RAID controllers.
    3. Middleware, such as MSDAC (used for database access).
    4. Support applications, such as Java or Flash.
    5. Codecs, like the QuickTime codec (and its own support applications).

About the author:
Serdar Yegulalp is editor of the Windows Power Users Newsletter.

This tip originally appeared on SearchWindowsSecurity.com.

Rate this Tip
To rate tips, you must be a member of SearchMidmarketSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Security vulnerability management
Intelligent threat management podcast
How to choose online data backup services for data protection
How to choose full disk encryption for laptop security, compliance
How to create a bit-image copy of a live server
Get more out of your security event log data
Tool defeats binary diffing, automated reverse engineering of Windows security patches
How to make data loss prevention tools affordable and manageable for midmarket
Examining Conficker: When a worm becomes a botnet
Stolen FTP credentials likely in latest website attacks
Hackers targeting unpatched Microsoft DirectShow flaw

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
network scanning  (SearchMidmarketSecurity.com)
port scan  (SearchMidmarketSecurity.com)
vulnerability analysis  (SearchMidmarketSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
SEARCH 
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts