Last night Microsoft informed the world , that we can expect an out of band security update. It is concerning the following products: Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 4, and Internet Explorer 6, Internet Explorer 7 and Internet Explorer 8 on supported editions of Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2.
Although this will disrupt common update procedures, we should all pay attention to this update. It shows that Microsoft is again willing to react swiftly to serious issues and for those with a history in it security like us, that really still is note worthy. It tells us that dealing with security issues can be done openly and according to a well defined process. Furthermore we should pay attention, as there will be cases in the not so near future, where we will hear about breaches because of unpatched systems.
History tells us, how bad inventory and patch management still are among of the weak spots in information security. Gentlemen, start your engines!