Microsoft Pushes Two Security Patches
Summary: Microsoft released two security updates in September 2012: MS12-061 for Microsoft Visual Studio Team Foundation Server and MS12-062 for Microsoft Systems Management Server 2003 and System Center Configuration Manager 2007, both enterprise components that are not widely installed. Microsoft also urged administrators to test a soon-to-be mandatory patch, KB2661254, which changes how Windows handles encryption keys in apparent response to weaknesses exploited by the Flame malware to spoof the encryption algorithm used by Remote Desktop and install itself on Windows PCs.
Key Takeaway: KB2661254 was available since August but not pushed through Windows Update until October, leaving a month in which the key-handling weakness Flame exploited could remain unaddressed on systems where administrators did not test and deploy it early.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026