New Microsoft security service to offer timely guidance

eWeek | at | by Mike

Microsoft plans to unveil a new security advisories service next Tuesday as part of an aggressive long-term effort to revamp the way it reacts to publicly reported software vulnerabilities.

The pilot project, which is independent of the scheduled monthly security bulletins, represents a major shift in the way the Redmond, Wash.-based software maker communicates with customers when information on security flaws is published by grey hat hackers and private research outfits.

The new offering, dubbed Microsoft Security Advisories, gives engineers at the MSRC an outlet for providing instant feedback, guidance and mitigations when researchers jump the gun and release vulnerability details before a patch is available.