Did you blink? You may have missed Firefox 2.0.0.11

That's right, the fine folks at Mozilla bungled one of the updates associated with 2.0.0.10. I could do some research to figure out what they messed up, but do you really care? Right, I didn't think so.

So just update to the latest version of Firefox and rejoice. Detailed instructions are on the Portal for Security Mike members.

Security Mike Update: QuickTime 0day attack

The QuickTime 0day is out there and has gotten a lot of press this week. I've published an Update notification for Security Mike Members. Check out the Portal for instructions on how to deal with the issue. For the most part, the configurations shown in Security Mike's Guide protects against the QT attack, but there are exceptions.

Once again, thinking before you click is a good thing to do.

Firefox 2.0.0.10 Update Posted

Another day, another Security Mike Update. This time Mozilla has updated the Firefox browser to 2.0.0.10 to address a pretty serious URI handling issue.

Step by step instructions are available on the Portal. Once you log in, hit PAGES, then SECURITY MIKE'S UPDATES, then PATCHES and you'll see the Update.

Apple Mac OS X 10.4.11 Update Posted

As part of Security Mike's update service, subscribers get step-by-step instructions on how to apply the most recent patches from the major OS vendors.

Last week, Apple released a MASSIVE patch which updates the OS X operating system to version 10.4.11.

If you are a Security Mike member and have registered for the Portal, you can get detailed instructions at this link:
https://www.securitymike.com/site.php/spgs/read/apple-osx-update-nov-2007/

If not, you can subscribe at this link:
http://buy.securitymike.com

Security Mike Update: QuickTime 7.2

Per Brian Krebs' great Security Fix blog, Apple has issued a patch to QuickTime for Windows users. If you use iTunes on Windows XP or Vista, that means you. So patch your devices ASAP. Here's how:

1. Find Apple Software Update in your Programs Menu and click on it.
2. The following dialog box comes up.
   
   
3. Install it. You'll see in my screen shot that I am on Windows Vista and will need to authenticate as an administrator to perform the update.
4. You'll see the following screen to confirm that it was installed. Then you need to restart.
   
   
   
5. You are good to go.

Once Security Mike's Portal goes live on October 15, I'll just be providing these updates to subscribers. So enjoy for now. The best way to make sure you are on top of things is to buy Security Mike's Guide and get the update service free for 6 months.

October Patch Tuesday is coming!

That's right, it's that time of the month. For Patch Tuesday that is. Microsoft's monthly ritual of updating their software to fix bugs and close security holes. As part of Security Mike's Update Service, you'll get an analysis of each month's updates and also a few screen shots to help you ensure the patches were installed correctly.

Since Security Mike's Portal doesn't launch until October 15, I'll post this month's analysis on the Blog and then on Tuesday post the screen shots to confirm your successful update.

This month Microsoft is issuing 7 updates - 4 of them critical. But regardless of how Microsoft grades their updates, you need to get in the habit of making sure the patches are applied as soon as possible.

So look for a more detailed analysis on Tuesday.