Microsoft readies first attack forecast

Microsoft debuts predictions that rate "exploitability" of vulnerabilities.

Microsoft will debut vulnerability predictions today when it issues 11 security updates for Windows, Office and Internet Explorer.

Announced more than two months ago, the "Exploitability Index" will be added to the bulletins that accompany each update. Microsoft's security experts will rate each vulnerability using a three-step ranking, in descending order of severity:

Consistent exploit code likely

Inconsistent exploit code likely

Functioning exploit code unlikely

Microsoft expects that users and corporate IT administrators will combine the index rating with the company's current threat rankings, which estimate the potential impact as "critical" through "low," to prioritize patches.

Also tomorrow, Microsoft is expected to reveal more information about another new program it talked up in August, Microsoft Active Protections Program (MAPP). An information-sharing effort, MAPP gives select security vendors an early jump on crafting exploit signatures by providing technical details of to-be-patched vulnerabilities before updates are issued. Prior to the program, security vendors had to wait like any customer for Microsoft to issue its patches before they could begin examining the bugs and start developing anti-exploit protection.

Microsoft has not said which security vendors are participating in the program, how far in advance they are given the information, or even the amount or type of data Microsoft will share.

In response to questions last Friday, a Microsoft spokesman would only say, "There will be some new information [about MAPP], along with the Exploitability Index, come Tuesday with the bulletin release."

However, it appears that security companies that have been accepted into MAPP received previews of tomorrow's vulnerabilities as early as last Thursday. Then, a spokeswoman for nCircle Network Security Inc. said that because the company had joined MAPP, its researchers would not be available for comment on the pre-patch notification Microsoft released that day.

Microsoft will release its 11 security updates today.

Join the newsletter!

Or

Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.

Tags Microsoft

Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.
Gregg Keizer

Gregg Keizer

Computerworld
Show Comments

Brand Post

Shining a light on creativity

MSI has long pushed the boundaries of invention with its ever-evolving range of laptops but it has now pulled off a world first with the new MSI Creative 17.

Most Popular Reviews

Latest Articles

Resources

PCW Evaluation Team

Tom Pope

Dynabook Portégé X30L-G

Ultimately this laptop has achieved everything I would hope for in a laptop for work, while fitting that into a form factor and weight that is remarkable.

Tom Sellers

MSI P65

This smart laptop was enjoyable to use and great to work on – creating content was super simple.

Lolita Wang

MSI GT76

It really doesn’t get more “gaming laptop” than this.

Jack Jeffries

MSI GS75

As the Maserati or BMW of laptops, it would fit perfectly in the hands of a professional needing firepower under the hood, sophistication and class on the surface, and gaming prowess (sports mode if you will) in between.

Taylor Carr

MSI PS63

The MSI PS63 is an amazing laptop and I would definitely consider buying one in the future.

Christopher Low

Brother RJ-4230B

This small mobile printer is exactly what I need for invoicing and other jobs such as sending fellow tradesman details or step-by-step instructions that I can easily print off from my phone or the Web.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?