From SANS: http://www.sans.org/newsletters/newsbites/newsbites.php?vol=10&issue=52&rss=Y#sID312

Microsoft Retires Windows XP, Will Support OS Through 2014 (June 30, 2008)
As of July 1, Microsoft will no longer be making its Windows XP operating system available to computer makers or consumers. XP will still be made available to small, independent computer makers through July 2009, and to manufacturers of low cost computers such as Asus until 2010. Some manufacturers are taking advantage of a loophole in Microsoft's licensing agreement that allows users to downgrade to earlier versions of operating systems at no cost. The decision to discontinue XP has met with protests from users who are unhappy with Windows Vista. In response, Microsoft has recently announced that it will support Windows XP through 2014.


http://www.informationweek.com/news/windows/operatingsystems/showArticle.jhtml?articleID=208801694

APPLE-SA-2007-06-14 Safari Beta 3.0.1 for Windows

The Safari 3 Public Beta was released on June 11 for Mac OS X and
Windows XP/Vista. This beta software is for trial purposes and
intended to gather feedback prior to a full release. As with all our
products, we encourage security researchers to report issues to
product-security@apple.com.

Microsoft released today Service Pack 2 for Server 2003.

According to Microsoft...

SP2 contains the latest collection of updates to help improve the security, reliability, and performance of the following operating systems:

• Windows Server 2003 All Editions (32-bit x86)
• Windows Server 2003 Itanium-based Editions
• Windows Server 2003 x64 Editions
• Windows Server 2003 R2 Editions
• Windows Server 2003 Storage Server R2 Edition
• Windows Server 2003 Compute Cluster Edition
• Windows Server 2003 for Small Business Servers R2 Edition
• Windows XP Professional x64 Edition

Get yours today!

http://www.microsoft.com/technet/windowsserver/sp2/overview.mspx

Original release date: June 16, 2006
Last revised: --
Source: US-CERT


Systems Affected

* Microsoft Excel 2003
* Microsoft Excel XP (2002)
* Microsoft Excel for Mac

Microsoft Excel is included with Microsoft Office. Other versions of Excel, and other Office programs may be affected or act as attack vectors.

Overview

An unspecified vulnerability in Microsoft Excel could allow an
attacker to execute arbitrary code on a vulnerable system.

Read more for the details from CERT.

Windows 98, Windows 98 Second Edition, and Windows Millennium Edition Support ends on July 11, 2006

Quote Microsoft: "Support for Windows 98, Windows 98 Second Edition, and Windows Millennium Edition (Me) ends on July 11, 2006. Microsoft will end public and technical support by this date. This also includes security updates. Microsoft is providing final notifications to customers to end the extended security update support for these products.

Microsoft is ending support for these products because they are outdated and these older operating systems can expose customers to security risks. We recommend that customers who are still running Windows 98 or Windows Me upgrade to a newer, more secure Microsoft operating system, such as Windows XP, as soon as possible."

Full disclosure at:http://support.microsoft.com/gp/lifean18

Microsoft has just released the latest build of IE7 as a public beta.

Go get it here:
http://www.microsoft.com/windows/IE/ie7/ie7betaredirect.mspx

From The Register: "Virus writers have created a Trojan which uses an unpatched vulnerability in Microsoft Office to take over Windows PCs. The Hesive Trojan can be disguised as a Microsoft Access file. Once opened in Access, infected .mdb files take advantage of a five-month old buffer overflow flaw in Microsoft's Jet Database Engine software to seize control of vulnerable machines."

Read the full story here.

Several new Microsoft service packs were released in the last day.

Microsoft Office 2003 SP2 Released
http://support.microsoft.com/kb/887616

Security bulletins that are associated with the service pack

MS05-023/KB890169: Vulnerabilities in Microsoft Word could lead to remote code execution
MS04-027/KB884933: Vulnerability in WordPerfect converter could allow code execution
MS04-028/KB833987: Buffer overrun in JPEG processing (GDI+) could allow code execution


Microsoft Visio 2003 SP2 Released
http://support.microsoft.com/kb/887622

Security bulletins that are associated with the service pack

MS04-028/KB833987: Buffer overrun in JPEG processing (GDI+) could allow code execution


Microsoft Outlook 2003 Junk Email Filter Update
http://support.microsoft.com/kb/904631

This update should improve your junk mail filtering accuracy.

Symantec has issued a patch for a vulnerability in its corporate anti-virus software that could allow an unauthorized person to access a company's servers. More details from Symantec here and also from NetworkWorld. "The Anti Virus product comes with a LiveUpdate client that can be set to check for product updates. After the client receives the updates from the LiveUpdate server, information about the transaction is stored in a local log file. The LiveUpdate server login and password are included in that log file as clear text, Symantec said."
The vulnerability affects SAV 9 on Windows.

Critical update for PowerChute Business Edition users

In order for PowerChute Business Edition Basic and Deluxe to remain functional, users must upgrade to any version of 7.x.

Due to expiration of the Sun Java Runtime Environment certificate, versions 6.x of PowerChute Business Edition are obsolete. Failure to upgrade will render PowerChute Business Edition inoperable. This software upgrade is free of charge and is available on APC's web site.

*Users of version 6.x Must Upgrade to version 7.x due to JRE retirement*

Failure to update your server software immediately may result in difficulty booting and/or accessing the control panel on your Windows server. Affected servers will not gracefully shut down due to power events.

Link to PCBE 7.0.4 Downloads:
http://www.apc.com/tools/download/software_comp.cfm?sw_sku=SFPCBE704

For Windows NT Customers, please download version 7.0.2:
http://www.apc.com/tools/download/software_comp.cfm?sw_sku=SFPCBE702

For PowerChute Business Edition Deluxe 6.x customers, please contact our technical support team at 800-890-4272.

NOTE: Versions 7.0 and higher are not affected by this JRE retirement.

read more for the APC knowledge base article.