It's May 2014 and there's a new update out for XP

[psydii]

Yup. Publicly available. Go run Windows Update.

 

If I'd just paid for premier extended support I'd be a bit miffed right now.

[MordyT]

http://blogs.technet.com/b/msrc/archive/2014/05/01/out-of-band-release-to-address-microsoft-security-advisory-2963983.aspx

[Arthur]

Hopefully MS doesn't keep releasing XP patches to the public each time there's a zero-day exploit.

 

The laggards need to upgrade...

 

www.edugeek.net/forums/news/135623-hackers-find-first-post-retirement-windows-xp-related-vulnerability.html#post1165020

[Arthur]

Microsoft’s decision to patch Windows XP is a mistake « Ars Technica

 

The next Patch Tuesday patch for Internet Explorer is almost certainly going to include flaws that affect Internet Explorer on Windows XP: the nature of software means that most flaws in Internet Explorer 7 (supported for the remainder of Windows Vista's life cycle) and Internet Explorer 8 (tied to Windows 7's life cycle) will also be flaws in Internet Explorer 7 and 8 when run on Windows XP. Many of them will also hit Internet Explorer 6.

 

In fact, this is precisely the pattern we've seen with this flaw. The first in-the-wild exploits hit only Internet Explorer 9, 10, and 11, on Windows 7 and 8. As security firm FireEye reports, it's only later that attacks for (unsupported) Internet Explorer 8 on Windows XP materialized.

 

Virtually every time Microsoft updates one of its remaining supported platforms, the company will also simultaneously be disclosing a zero-day vulnerability for Windows XP (something Apple has recently been criticized for doing). The patch list for May's Patch Tuesday—less than two weeks away—isn't out yet, but based on Internet Explorer's track record, it's highly likely that it's going to get updated, and it's highly likely that these updates will reveal exploitable flaws on Windows XP.

 

[...]

 

... the option Microsoft took is the worst of all worlds. It undermines efforts by IT staff to ditch the ancient operating system, and undermines Microsoft's assertion that Windows XP isn't supported, while doing nothing to meaningfully improve the security of Windows XP users. The upside? It buys those users at best a few extra days of improved security. It's hard to say how that was possibly worth it.