One of my RSS feeds is the online diary from the handlers at the Internet Storm Center.
It gives me an early update on new trends and activities that are on the net - and things to watch for in protecting my own hardware and online infrastructure.
I've noticed in the last week or so another couple of very high profile Windows vulnerabilities - the ANI cursor problem and the newest - an attack on Windows DNS services.
These issues often end up with emergency updates being made available; outside of the usual 'patch Tuesday'. The severity is such that updates need to be made now.
The impact is clear - multiple strategies are needed for modern IT infrastructure:
- antivirus- intrusion detection- patching- firewall
Most important - above all of these technologies - is a good, tested process for triaging and delivering patches. Without a good process it's like having a fire extinguisher but not knowing how to use it.
ZENworks Patch Management will help as part of this broad approach; it allows rapid test and delivery up updates to affected systems. It also provides some great methodology on the 'how' to patch systems as well.
Written at: Beijing, China