Windows 10 Version 1607 gets a cumulative update right out of the gate, and Win7 gets a slight reprieve from its issue with slow update scanning.
Plus: Just when you had the nonsecurity Office-update schedule down, Microsoft changes it up — temporarily.
August’s Internet Explorer patch is incomplete
The August surprise is a cumulative Internet Explorer update that doesn’t include the usual Adobe Flash fix. If you haven’t done so already, I urge you to go into your browser settings and disable automatic Flash loading. A How-To Geek article gives instructions for Chrome, Firefox, IE, Opera, and Safari. This is important: A recent webcast I watched notes that preventing Flash media from automatically running is a key part of preventing browser-based ransomware attacks.
To make the change in Edge, go into Settings, scroll down to the bottom, and click View Advanced Settings; then set “Use Adobe Flash Player” to off. Note, however, that this setting doesn’t give you the “click-to-play” option you have in, say, Foxfire — with Edge, Flash is all or nothing. Given the risk of ransomware attacks via this media player, I’m more comfortable viewing Flash-based video in a browser other than Edge.
This cumulative IE update does remove RC4 ciphers (more info), a technology that’s no longer cryptographically secure. This update brings both Edge and IE 11 up to the same cipher level as the most recent versions of Chrome and Firefox. With the RC4 ciphers removed, you shouldn’t see any change in your browser experience.
What to do: Install KB 3177356 (MS16-095) as soon as it’s offered. (The patch is included in the Aug. 9, Win10 cumulative updates.)
MS16-096 (3176492, 3176493, 3176495) and MS16-103
The three patching faces of Windows 10
As promised, on August 2, Microsoft began rolling out Win10 Anniversary Upgrade — aka Version 1607. If you’ve installed the new version, you should have already received a cumulative update, in the form of KB 3176495.