[IS&T Security-FYI] Newsletter, May 11, 2007

[Monique Yeaton]

-------------------------------------------------
Microsoft's May 2007 Security Patches
-------------------------------------------------

This past Tuesday, May 8, Microsoft released 19 patches, 7 of which  
are critical. The patches include three for zero-day bugs already  
known to attackers and affect the following software or components:

- Microsoft Windows
- Microsoft Exchange
- Microsoft Office including Excel and Word for Windows and Mac OS X
- Internet Explorer
- CAPICOM  (Cryptographic API Component Object Model)
- BizTalk
- Windows Server

The patches are now available for deployment via MIT WAUS.

If you have Automatic Updates enabled on your system, the updates are  
delivered to you when they are released, but you have to make sure  
you install them. We recommend that you take the updates unless you  
have specific information indicating that it is incompatible with an  
application you need to use. You may have to restart your computer  
after applying the patches.

Detailed descriptions of the 7 security updates are in Microsoft  
Security Bulletins MS07-023 through MS07-029, available here:

<http://www.microsoft.com/technet/security/bulletin/ms07-may.mspx>

End users who wish to skip the details and go right to the downloads  
page can go here:

<http://www.microsoft.com/protect/computer/updates/bulletins/ 
200705.mspx>

Thank you for using WAUS or the Microsoft Update services. The best  
line of defense against viruses and other malware is to keep your  
system and software up to date.

Monique

=========================
Monique Yeaton
IT Security Awareness Consultant
MIT Information Services & Technology (IS&T)
(617) 253-2715
http://web.mit.edu/ist/security