Eclipse Integrated Systems Blog

Eclipse Integrated Systems has been serving the Bridgewater area since 1994, providing IT Support such as technical helpdesk support, computer support, and consulting to small and medium-sized businesses.

You Need To Be Familiar With Patching Terminology

You Need To Be Familiar With Patching Terminology

Over the past several months, while watching the news or reading about business and technology, you’ve probably encountered a few words, such as ‘ransomware’ ‘exploit weakness’, and ‘security patch’. These terms are used often, and you may be confused as to what they really mean, and how they relate to you and the security of your business’ data.

In recent months, ransomware attacks like WannaCry and other malware have made headlines, with cyber criminals exploiting weaknesses in networks, application deployments, and operating systems. What is very hard for some people to understand is that often the weaknesses being exploited are known by software developers, who have released security updates known as ‘patches.’

For many small business owners and personal PC users, a better understanding of types of patches, how they work, when they’re released, and how to access them might be all that stands between a hacker and your network. Here are five terms that are associated with the continuous software updates that aim to protect users from data loss or worse.

Patch Tuesday - For those who allow their computer to update and install patches automatically, it might have never really occurred to them that there was a schedule as to when Microsoft released patches. Similar to how new movies are released or video games are launched on specific days of the week, Microsoft releases patches on the second (and sometimes fourth) Tuesday of each month. With newer operating systems and software versions, there might come a time where Patch Tuesday becomes obsolete in favor of a real-time data exchange where software and applications are constantly updated as needed.

Security Patching - This is what most people think of when they think of a patch for a piece of software or an application. It’s a series of data and files that fix or mitigate the threat of a known issue or vulnerability. These are generally what are provided on official patch days, like Patch Tuesday. That is, of course, unless the patch is a zero-day or immediate release, an action usually reserved for major security risks or weaknesses found after they have been exploited.

Hotfix - Sometimes referred to as a ‘Quick-fix Update’ ‘Quick-fix Engineering Update’ or ‘General Distribution Release’, a hotfix is a small patch that fixes a single bug or vulnerability that is significant enough that it should not wait until the next scheduled patch release. Although, Microsoft itself no longer uses the term ‘hotfix’ in an official capacity, the term is still widely used by majority of the industry.

Zero Day Vulnerability - This is a specific type of weakness that is not discovered or disclosed until the hackers are already exploiting it. This is called ‘zero day’ because software developers and advocates have no time - or zero days - to create a patch or develop a work around, leaving both users and developers scrambling to keep data safe.

Whitelisting - As related to malware and ransomware, whitelisting is the process in which a patch or application is declared safe, allowed access to the network, or otherwise approved for a certain network or program. The term ‘whitelist’ comes from the opposite of ‘blacklist’. Made popular during the Cold War, blacklist refers to a list of people or items that are banned, rejected, or labeled in a negative way. Whitelisting was tossed around when so many WannaCry victims had the security patch needed since March. Many establishments were waiting for internal IT departments to test and officially ‘whitelist’ the patch which would allow the installation of the security patch needed to eliminate the vulnerability exploited by the WannaCry ransomware.

Truthfully, there is a lot more to patches than just the five terms above - and the more your business relies on technology the more important proper maintenance of technology - including patches and updates, becomes to your continued success. In the end, working with Eclipse Integrated Systems will help you make sure that your business is always properly updated, with pertinent, whitelisted patches. Call us at 800-340-0505 to learn more.

 

Comments

No comments made yet. Be the first to submit a comment
Already Registered? Login Here
Guest
Monday, 21 May 2018

Captcha Image

Mobile? Grab this Article!

Qr Code

Tag Cloud

Tip of the Week Security Best Practices Technology Privacy Cloud Hackers Business Computing Internet Malware Network Security Software Google Business Management Microsoft Windows 10 Computer Hosted Solutions Innovation User Tips Backup Productivity Productivity Business Windows Apps Cybersecurity Email Mobile Devices Smartphone Cybercrime Efficiency Hardware Operating System Law Enforcement Virtualization Saving Money Disaster Recovery Managed IT Services Browser VoIP Ransomware Data Security Data Backup Android Smartphones Tech Term Small Business Business Continuity IT Support Internet of Things Mobile Device Management Telephone Systems Money Miscellaneous Passwords Holiday Mobility Server Office 365 Microsoft Office Data Recovery Wireless Quick Tips communications Chrome Phishing Health Wi-Fi App Information Technology Government Cloud Computing Unsupported Software IT Support Google Drive Outsourced IT Cost Management Application Update Communication BDR Collaboration Vulnerability Password IT Services Best Practice Risk Management Workplace Tips Social Gadgets Employer-Employee Relationship USB Social Media Alert Managed Service Provider Antivirus Upgrade Data Management Politics Facebook Managed IT Data Current Events Spam Two-factor Authentication Windows 10 Computers Hacking Shortcut Identity Theft Save Money User Error Work/Life Balance Office tips Users Computer Care Meetings Artificial Intelligence Legal Search The Internet of Things Excel Hosted Solution Office Flexibility Mobile Computing Network DDoS Cleaning Router History End of Support Mobile Security Sports Google Docs Battery Private Cloud Blockchain Save Time HaaS Recovery Commerce Automation Data Protection Tech Support Personal Information Maintenance Automobile Transportation Going Green Internet Exlporer Apple Wireless Technology eWaste Data Storage WiFi Devices OneNote Cortana Samsung Encryption Streaming Media VPN Proactive IT Telephony Social Engineering Bandwidth Humor Managed IT Services Television Remote Computing Wireless Charging Audit Fraud iPhone Patch Management Computer Fan Word Smart Technology Video Games Avoiding Downtime Edge Data Theft Chromecast Specifications Safety Evernote Emails Outlook WannaCry Windows Ink Ciminal Computing Sales Cast Internet Explorer Networking Webinar Google Maps Virtual Reality Project Management App store Retail BYOD Entertainment Trending Threat Data storage Workers IT solutions Sync Nanotechnology Data Loss Lithium-ion battery Scam Education Scalability IT budget Bluetooth Administrator Conferencing Mobile Device Distributed Denial of Service Updates Windows 10s Root Cause Analysis Employer Employee Relationship How To Marketing Fax Server Identity Access Gifts HBO Experience Microsoft Word Solid State Drive Adobe Identities Augmented Reality Microsoft Excel Computer Accessories Point of Sale Advertising Data Privacy Credit Cards SaaS Phone System Applications Gmail Hacker Hard Disk Drive Reputation Language Files File Sharing Wearable Technology Hard Drive Unified Threat Management IT Management Music Licensing Keyboard Laptop Device Security Storage Vendor Management Black Market Analytics Chromebook Robot FAQ Upgrades IT Solutions Travel Touchpad Virus Running Cable Big Data SharePoint PDF Printing Screen Mirroring Charger Consultant iOS Tablets Hiring/Firing Spyware Proactive Legislation Training Worker Commute Instant Messaging Books Text Messaging Google Assistant Touchscreen WIndows Server 2008 Uninterrupted Power Supply NFL Benefits Operating Sysytem Websites Settings Budget Comparison Company Culture Managing Stress Electronic Medical Records Teamwork Value Data Breach Cache Twitter Remote Monitoring Emergency Monitors Disaster Worker PowerPoint Connectivity CrashOverride Relocation

Sign up for our Newsletter!

  • Company Name *
  • First Name *
  • Last Name *

      Latest News

      Eclipse Integrated Systems launches new website!

      Eclipse Integrated Systems is proud to announce the launch of our new website at www.eisystems.com. The goal of the new website is to make it easier for our existing clients to submit and manage support requests, and provide more information about our services for prospective clients.

      Read more ...

      Account login