security advisories

  1. CISA Advisories Enhance Security for Industrial Control Systems

    On November 7, 2024, the Cybersecurity and Infrastructure Security Agency (CISA) unveiled three critical advisories aimed at improving security within the realm of Industrial Control Systems (ICS). This proactive move underlines the ongoing vulnerabilities present in these essential...
  2. October 2014 Updates

    Today, as part of Update Tuesday, we released eight security updates – three rated Critical and five rated Important - to address 24 Common Vulnerabilities & Exposures (CVEs) in Windows, Office, .NET Framework, .ASP.NET, and Internet Explorer (IE). We encourage you to apply all of these updates...
  3. Improved cryptography infrastructure and the June 2013 bulletins

    It was just over one year ago, May 28, 2012, to be exact, that I transitioned from running active MSRC cases and writing bulletins to my current role managing software security incidents. A lot has changed in that year - and I’ve dealt with some interesting issues during my tenure - but...