"Patch Tuesday" is the day each month that Microsoft releases their newest security updates, typically the second Tuesday of the month.  This month was very light with just two updates, neither of which is "critical", and neither of which involves common end-user products like Internet Explorer or Windows:  Vulnerability in Visual Studio Team Foundation Server Could Allow Elevation of Privilege (2719584) and Vulnerability in System Center Configuration Manager Could Allow Elevation of Privilege (2741528).  For a full breakdown, check out the Microsoft Security Bulletin posted on line. 

This month started as an easy month, but just a few days later, Microsoft alerted users it would release a fix for a serious Internet Explorer security flaw that affects versions 6-9.  Read more on CNet.

A "critical" patch is defined by Microsoft as "a vulnerability whose exploitation could allow the propagation of an Internet worm without user action".  As a general rule, all critical patches should be installed as soon as possible. Note that many of the patches require a reboot for installation.  Also, if you have a managed service support plan with us, all patches are tested before installation.

Next month (October) we're expecting Microsoft to release a major update invalidating certificates with short keys (under 1024 bits). Stay tuned...