Patch Tuesday January 2018: all the monthly security patch news you need for your small business.
Spectre and Meltdown
Yes, there is a big security flaw in every CPU manufactured since 2001 and it effects every device you have. Yes there are patches and things you need to know for your business. I have written a separate blog here to help you.
You still need to know about these other updates too.
Microsoft Updates
Microsoft patched a whopping 56 vulnerabilities yesterday (January 9th). Key updates (besides the CPU fix) are critical security fix to Office 2016 and Office for Mac, also patches for Microsoft Edge, Internet Explorer and the .NET Framework.
Apple Bytes
Apple has been busy too: updates for the Mac OS, and every iThingy except the Watch this month. Most are related to the CPU hack.
Older iPhone getting sluggish? Apple finally confessed that it programs your older iPhone to slow down when your battery gets older to “provide a better experience”. Certainly it provides a better experience for Apple investors. Apple has apologized (sort of ) and is offering a deal on battery replacements for iPhones 6 and 7.
Apple is now being investigated by U.S. Senate and the French government for this “better experience” and there are several class action lawsuits started in the States.
More on this story here.
Hot Flash
Our monthly favourite is back: Adobe Flash needs a security update. Microsoft Edge users get this bundled with their Windows updates. Chrome automatically updates this. If you use Firefox or another browser like Opera, you will need to get a separate update from Adobeweb site here. Be sure to uncheck the crapware Adobe bundles with the Flash update.
Android Agony
Google published its January fixes that besides protecting against Spectre in ARM processors also patch 38 other vulnerabilities.
WordPress Wobbles
No core update to WordPress but there are updates to several popular plugins. These plugsins include Akismet AntiSpam, Yoast SEO, UpdraftPlus and JetPack.
Be sure to budget at least two hours this month to patch everything.
An ounce patching saves a pound of hacking.
Here’s links to some more technical blogs about this Patch Tuesday January 2018:
https://krebsonsecurity.com/2018/01/microsofts-jan-2018-patch-tuesday-lowdown/
