Microsoft announce another CVE - Win32k Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Windows kernel improperly handles objects in memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

Microsoft has reserved CVE candidate CVE-2017-8554 ready for announcement, but an early indication for MSRC shows the following OS Versions affected:

Windows 10
Windows 8.1
Windows 7

Server 2016
Server 2012 R2
Server 2012
Server 2008 R2
Server 2008

This vulnerability has been rated CVSS 4.7 resulting in a Medium Risk

Migrating existing MBSA Security Scan Results between Servers

Microsoft Baseline Security Analyzer (MBSA) checks for available updates to the operating system, Microsoft Data Access Components (MDAC), MSXML (Microsoft XML Parser), .NET Framework, and SQL Server. MBSA also scans a computer for insecure configuration settings. When MBSA checks for Windows service packs and patches, it includes in its scan Windows components, such as Internet Information Services (IIS) and COM+.

If you ever need to move MBSA from one server to another you may notice, once you have installed MBSA on your destination server that your existing security scan reports are no longer available and the option is greyed out:

Free ebooks from Microsoft Press on MVA

If like me your always on the lookout for free stuff, the latest collection of free ebooks from Microsoft Press are now available on the MVA (Microsoft Virtual Academy)

The latest collection include titles for:

• Microsoft System Center 2012
• Microsoft Windows Server 2012 R2
• Windows Azure
• Windows 8.1
• App Development

Pop along to the MVA and grab your free ebooks here.

Getting Started with PowerShell 3.0 on MVA

 I have just completed the 'Getting Started with PowerShell 3.0' Jump Start course on the Microsoft Virtual Academy.
These are the recordings of the live event from 18th July 2013 presented by Jeffrey Snover, the inventor of PowerShell, and Jason Helmick, Senior Technologist at Concentrated Technology.

Microsoft Licensing Fundamentals on MVA

I have just taken the Microsoft Licensing Fundamentals course on Microsoft Virtual Academy, and after watching the 30 min training video I'm starting to understand the Licensing suites and how they enable transitioning from On-Premise to Cloud based solutions.

If anyone is interested in Microsoft Licensing 101 (Level 100) take a look at this online course which can count as credit towards you becoming your companies Microsoft Licensing Expert.

Microsoft Licensing Fundamentals on MVA