Barney's Blog

Blog archive

More Patches Than a 'Three Stooges' Tire

Some patches are good. When I was a teenaged hippie, I had nearly a hundred patches hand-sewn on my jeans. The pants were so frayed, my Swedish grandmother replaced the whole backside, which also soon got patched.

Other patches aren't so good -- patches on inner tubes that fall off faster than a 4-year-old on a two-wheeler, and "Patch Adams" are examples of that.

Microsoft patches are almost always good, so I'm optimistic that next Tuesday there will be another fine batch. And what a big batch it will be. Eight fixes are deemed critical (often, that term is scarier than need be).

These are equal-opportunity patches hitting everything from databases to productivity software to dev tools like Silverlight. And, of course, there's Windows. Windows needs so many patches I'm starting to worry about moths!

Most of these tools are beset by the same old beast: remote code execution exploits. Darn them! But the reliable denial-of-service and spoofing attacks also made a comeback. Give the hackers points for bringing back a couple of classics.

Posted by Doug Barney on October 09, 2009


Featured

  • Microsoft Dismantles RedVDS Cybercrime Marketplace Linked to $40M in Phishing Fraud

    In a coordinated action spanning the United States and the United Kingdom, Microsoft’s Digital Crimes Unit (DCU) and international law enforcement collaborators have taken down RedVDS, a subscription based cybercrime platform tied to an estimated $40 million in fraud losses in the U.S. since March 2025.

  • Sound Wave Illustration

    CrowdStrike's Acquisition of SGNL Aims to Strengthen Identity Security

    CrowdStrike signs definitive agreement to purchase SGNL, an identity security specialist, in a deal valued at about $740 million.

  • Microsoft Acquires Osmos, Automating Data Engineering inside Fabric

    In a strategic move to reduce time-consuming manual data preparation, Microsoft has acquired Seattle-based startup Osmos, specializing in agentic AI for data engineering.

  • Linux Foundation Unites Major Tech Firms to Launch Agentic AI Foundation

    The Linux Foundation today announced the creation of a new collaborative initiative — the Agentic AI Foundation (AAIF) — bringing together major AI and cloud players such as Microsoft, OpenAI, Anthropic and other major tech companies.