Security Updates for Microsoft Windows, Java
Summary: Microsoft issued updates patching at least 19 security holes in Windows, three rated critical, including one flaw in all supported Windows versions that the Duqu Trojan had exploited for at least two months to steal data from industrial control systems. Oracle separately released Java 6 Update 30, which addresses at least six security issues, while its Java 7 update carried no security fixes.
What's compelling: The critical Windows flaw was already in use by Duqu, an espionage tool built to pull sensitive data out of industrial control systems, for at least two months before a patch existed - a reminder that the window between exploitation and fix is measured in months, not days.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026