Microsoft Patch Day News Roundup August 2019 (Updated)

*UPDATES
*Microsoft: These Windows 10 updates fix broken Visual Basic apps but not for 1903
https://www.zdnet.com/article/microsoft-these-windows-10-updates-fix-broken-visual-basic-apps-but-not-for-1903/

*Microsoft releases patches to fix the VB/VBA/VBScript bugs
https://www.askwoody.com/2019/microsoft-releases-patches-to-fix-the-vb-vba-vbscript-bugs/

*More fixes for the VB/VBA/VBScript bugs in this month’s patches
https://www.askwoody.com/2019/more-fixes-for-the-vb-vba-vbscript-bugs-in-this-months-patches/

August 2019 Security Updates
https://msrc-blog.microsoft.com/2019/08/13/august-2019-security-updates/
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/312890cc-3673-e911-a991-000d3a33a34d

Vulnerability in Microsoft CTF protocol goes back to Windows XP
https://www.zdnet.com/article/vulnerability-in-microsoft-ctf-protocol-goes-back-to-windows-xp/

August 2019 Microsoft Patch Tuesday
https://isc.sans.edu/forums/diary/August+2019+Microsoft+Patch+Tuesday/25236/

August 2019 Security patches: It’s a biiiiiiiiig month
https://www.askwoody.com/2019/august-2019-security-patches-its-a-biiiiiiiiig-month/

Microsoft warns of two new ‘wormable’ flaws in Windows Remote Desktop Services
https://www.zdnet.com/article/microsoft-warns-of-two-new-wormable-flaws-in-windows-remote-desktop-services/

August Patch Tuesday: Update Fixes ‘Wormable’ Flaws in Remote Desktop Services, VBScript Gets Disabled by Default
https://blog.trendmicro.com/trendlabs-security-intelligence/august-patch-tuesday-update-fixes-wormable-flaws-remote-desktop-services-vbscript-disabled-by-default/

To patch Windows or not: Do you want BlueKeep bug or broken Visual Basic apps?
https://www.zdnet.com/article/to-patch-windows-or-not-do-you-want-bluekeep-bug-or-broken-visual-basic-apps/

Do you want to protect yourself against BlueKeep, or break Visual Basic?
https://www.askwoody.com/2019/do-you-want-to-protect-yourself-against-bluekeep-or-break-visual-basic/

Microsoft quietly updates all of this month’s Windows patches warning about conflicts with Visual Basic 6, VBA and VBScript
https://www.askwoody.com/2019/microsoft-quietly-updates-all-of-this-months-windows-patches-warning-about-conflicts-with-visual-basic-6-vba-and-vbscript/

August 2019 Updates: Issues with VB6, VBA and VBScript
https://borncity.com/win/2019/08/15/august-2019-updates-issues-with-vb6-vba-and-vbscript/

The sky is not falling: DejaBlue (aka BlueKeep II, III, IV, V) are not being exploited in the wild
https://www.askwoody.com/2019/the-sky-is-not-falling-dejablue-aka-bluekeep-ii-iii-iv-v-are-not-being-exploited-in-the-wild/

Microsoft Patch Day News Roundup August 2019

August 2019 Security Updates
https://msrc-blog.microsoft.com/2019/08/13/august-2019-security-updates/
https://portal.msrc.microsoft.com/en-us/security-guidance/releasenotedetail/312890cc-3673-e911-a991-000d3a33a34d

Vulnerability in Microsoft CTF protocol goes back to Windows XP
https://www.zdnet.com/article/vulnerability-in-microsoft-ctf-protocol-goes-back-to-windows-xp/

August 2019 Microsoft Patch Tuesday
https://isc.sans.edu/forums/diary/August+2019+Microsoft+Patch+Tuesday/25236/

August 2019 Security patches: It’s a biiiiiiiiig month
https://www.askwoody.com/2019/august-2019-security-patches-its-a-biiiiiiiiig-month/

Microsoft warns of two new ‘wormable’ flaws in Windows Remote Desktop Services
https://www.zdnet.com/article/microsoft-warns-of-two-new-wormable-flaws-in-windows-remote-desktop-services/

August Patch Tuesday: Update Fixes ‘Wormable’ Flaws in Remote Desktop Services, VBScript Gets Disabled by Default
https://blog.trendmicro.com/trendlabs-security-intelligence/august-patch-tuesday-update-fixes-wormable-flaws-remote-desktop-services-vbscript-disabled-by-default/

To patch Windows or not: Do you want BlueKeep bug or broken Visual Basic apps?
https://www.zdnet.com/article/to-patch-windows-or-not-do-you-want-bluekeep-bug-or-broken-visual-basic-apps/

Do you want to protect yourself against BlueKeep, or break Visual Basic?
https://www.askwoody.com/2019/do-you-want-to-protect-yourself-against-bluekeep-or-break-visual-basic/

Microsoft quietly updates all of this month’s Windows patches warning about conflicts with Visual Basic 6, VBA and VBScript
https://www.askwoody.com/2019/microsoft-quietly-updates-all-of-this-months-windows-patches-warning-about-conflicts-with-visual-basic-6-vba-and-vbscript/

August 2019 Updates: Issues with VB6, VBA and VBScript
https://borncity.com/win/2019/08/15/august-2019-updates-issues-with-vb6-vba-and-vbscript/

The sky is not falling: DejaBlue (aka BlueKeep II, III, IV, V) are not being exploited in the wild
https://www.askwoody.com/2019/the-sky-is-not-falling-dejablue-aka-bluekeep-ii-iii-iv-v-are-not-being-exploited-in-the-wild/

Microsoft Patch Day News Roundup July, 2019 (7/11/2019)

July 2019 Security Update Release: https://msrc-blog.microsoft.com/2019/07/09/july-2019-security-update-release/
July 2019 Patch Tuesday has arrived: https://www.askwoody.com/2019/july-2019-patch-tuesday-has-arrived/
MSFT July 2019 Patch Tuesday: https://isc.sans.edu/diary/25110
July’s Patch Tuesday Fixes Critical Flaws in Microsoft Edge and Internet Explorer, Including 2 Exploited Vulnerabilities: https://blog.trendmicro.com/trendlabs-security-intelligence/julys-patch-tuesday-fixes-critical-flaws-in-microsoft-edge-and-internet-explorer-including-windows-dhcp-server/
Patch Tuesday Lowdown, July 2019 Edition: https://krebsonsecurity.com/2019/07/patch-tuesday-lowdown-july-2019-edition/
Microsoft surreptitiously adds telemetry functionality to July 2019 Win7 Security-only patch: https://www.askwoody.com/2019/microsoft-surreptitiously-adds-telemetry-functionality-to-july-2019-win7-security-only-patch/
New Windows 7 ‘security-only’ update installs telemetry/snooping, uh, feature: https://www.computerworld.com/article/3408496/new-windows-7-security-only-update-installs-telemetrysnooping-uh-feature.html
Microsoft stirs suspicions by adding telemetry files to security-only update : https://www.zdnet.com/article/microsoft-stirs-suspicions-by-adding-telemetry-files-to-security-only-update/
Windows 7’s July 2019 Security Patch Includes Telemetry: https://www.howtogeek.com/428265/windows-7s-july-2019-security-patch-includes-telemetry/
Microsoft to Windows 10 users: Patch Secure Boot now against ‘critical’ bug: https://www.zdnet.com/article/microsoft-to-windows-10-users-patch-secure-boot-now-against-critical-bug/
Microsoft July 2019 Patch Tuesday fixes zero-day exploited by Russian hackers: https://www.zdnet.com/article/microsoft-july-2019-patch-tuesday-fixes-zero-day-exploited-by-russian-hackers/