Adios Patch Tuesday

Two momentous events this month: the inauguration of The Donald and the last Microsoft Patch Tuesday ever.

Which will cause the most problems? We can’t help but wonder.

If you have been reading this blog for any amount of time, you will probably be bored of us complaining about the amount of time it takes the mighty Microsoft to patch issues that have sometimes been announced to the general hacking public by its good friends Google, for instance!

Well, blow us sideways with a feather, Microsoft has only gone and changed its patching policy from once a month to the very much more Google-like continuous update policy.

As with a considerable number of these announcements, the devil is in the detail, or in the case of the inauguration the detail is in The Devil.

So, if you are wondering how your finely honed monthly patching procedures will be totally destroyed in one fell swoop and require re-engineering the entire way you operate in the now-time, take a look at this ever so informative missive.

Now might be the time to consider Platform as a Service (PaaS) solution, such as err, Amazon Web Services or Azure so that somebody else takes the responsibility for these auto-patches not breaking your shiz.

We welcome this progress, if the updates are timely and regression tested, which as we all know, they will be. We advise service and patch management people to get a grip on this pronto.

In other news this week, we notice that the scumbags ‘ransomwaring’ healthcare organisations have decided that it would be a great idea to inflict their particularly nasty warez on not-for-profit cancer services outfit ‘Little Red Door’. Because they are charitably funded for the specific purpose of care, they cannot pay the bill using their funding and have to take it on the chin. Words cannot describe how evil this is.

Ransomware will continue to be a problem in 2017 and we look forward to the industry and academics coming together to combat this heinous activity.

If you would like some advice about patching, ransomware avoidance or anything else security related, contact us (unless the nuclear apocalypse is underway) at: [email protected] or 020 7517 3900.