Technology Advisor: Patch Tuesday (Again!), More Phishing, Tech Headlines

Vol 12-12 December 2012

Ekaru

Specializing in information technology outsourcing for small and medium businesses (1-50 Employees). "It's like having your own IT department"

Network Design
High Speed Internet
Computers & Software Network
Security Email & Web Hosting
Back-ups
Virus Protection & Recovery
Web Sites
Professional Service

www.ekaru.com

978-692-4200
866-go-ekaru

Welcome to this month's issue! The Technology Advisor provides technology advice, strategy, tips and trends to help you manage and grow your business! Happy Holidays and Best Wishes for 2013!

"Patch Tuesday" - December

"Patch Tuesday" is the day each month that Microsoft releases their newest security updates, typically the second Tuesday of the month. This month included seven updates, including five "critical" updates and two "important" updates. The updates impact Internet Explorer, Windows, Office... just about all users are affected:

Bulletin ID	Bulletin Title and Executive Summary	Maximum Severity Rating and Vulnerability Impact	Restart Requirement	Affected Software
MS12-077	Cumulative Security Update for Internet Explorer (2761465)	Critical Remote Code Execution	Requires restart	Microsoft Windows, Internet Explorer
MS12-078	Vulnerabilities in Windows Kernel-Mode Drivers Could Allow Remote Code Execution (2783534)	Critical Remote Code Execution	Requires restart	Microsoft Windows
MS12-079	Vulnerability in Microsoft Word Could Allow Remote Code Execution (2780642)	Critical Remote Code Execution	May require restart	Microsoft Office
MS12-080	Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2784126)	Critical Remote Code Execution	May require restart	Microsoft Server Software
MS12-081	Vulnerability in Windows File Handling Component Could Allow Remote Code Execution (2758857)	Critical Remote Code Execution	Requires restart	Microsoft Windows
MS12-082	Vulnerability in DirectPlay Could Allow Remote Code Execution (2770660)	Important Remote Code Execution	May require restart	Microsoft Windows
MS12-083	Vulnerability in IP-HTTPS Component Could Allow Security Feature Bypass (2765809)	Important Security Feature Bypass	Requires restart	Microsoft Windows

For a full breakdown, check out the Microsoft Security Bulletin posted on line. Note that in the days leading up to Patch Tuesday, there is always an advance notification, which gets replaced by the actual bulletin on the release date.

A "critical" patch is defined by Microsoft as "a vulnerability whose exploitation could allow the propagation of an Internet worm without user action". As a general rule, all critical patches should be installed as soon as possible. Also, if you have a managed service support plan with us, all patches are tested before installation, and we are tracking the updates for you.

Note that several of the security bulletins require reboots! If you aren't regularly rebooting your systems, this is an important reminder.

Check out the summary blog on TechRepublic for a good explanation of the impact of the updates this month.

More Phishing Scams - Watch for "Search"

We continue each month to see reports of more phishing scams including fake incoming fax reports, fake wire transfers, and emails claiming to be from major companies such as UPS, JetBlue, eBay, ATT, LinkedIn, Microsoft, Verizon Wireless, etc that are designed to get you to click on links that will possibly infect your system with malware or try to trick you into submitting your personal account information. During this busy time of year, STAY ALERT!

Another thing to watch out for is to be careful when you "google" a web page for quick access. Recently, a user reported searching for the "Registry of Motor Vehicles" to renew a drivers license and wound up providing credit card information to a fake site. Another user tried to download Skype from the wrong site and wound up with annoying adware. CHECK LINKS CAREFULLY!

Tech Headlines

Instagram says it has the right to sell your photos - Huge backlash will change this, but beware of the privacy price you pay for "free" services! Read more on CNET

What saturation point? Twitter active users passes the 200M mark -The major on-line sites are building their turf. Read More on CNET

Microsoft Surface coming to Retail Outlets - Its already available at Staples - check it out, it's cool! Read More on ZDNet

Widows 8 Update - More like Vista than Windows 7 - Very early sales didn't look great, but recent reports look better - Stay tuned. Windows 8 looks VERY different from anything you've seen so far. Read More on ComputerWorld

CNET Holiday Gift Guide 2012- If you're still searching for a last minute gift for a tech enthusiast, check out this gift guide. Read More on CNET

Ekaru Blog - Windows 8 - Where is Everything? Tips for getting started with Windows 8.

Ekaru Blog - What is the Cloud? Confused by the hype? This article gives some guidance.

Ekaru Webinar - Going Mobile! If you missed our last training webinar on getting more secure and efficient with mobile devices, the presentation is posted on our web site.

Connect with us on line!

Daily Small Business Tech News

Please "Like" us for tech tips, news, and free training

Subscribe to our blog for weekly tech tips

Connect with us on LinkedIn

Does your business have a Facebook page or Twitter account? - Let us know so we can follow you too!

New! YouTube Training Videos - Check out our YouTube Channel - More training videos coming for 2013! www.youtube.com/user/EkaruIT If you need to do an "out of office" reply for an upcoming vacation, check out the video!

Happy Holidays and Best Wishes for 2013!

Introductory Technology Assessment Over 450 local small businesses have chosen Ekaru to manage their computers and networks. We offer a free, no-obligation initial consultation to get started. We'll visit your office, review your network, and make recommendations. Call us at 978-692-4200 or email us to schedule a no-obligation assessment. If you know someone who could benefit from this offer, simply forward this email to them. Thank You!