2018
Microsoft Releases April 2018 Security Updates
Microsoft has released security updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabiliti…
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe PhoneGap Push Plugin, Adobe Digital Editions, Adobe InDesign, Adobe Experienc…
Security patches for OpenSSL
New updates for OpenSSL fix a vulnerability that could lead to Denial of Service attack. Users of OpenSSL 1.1.0 should upgrade to 1.1.0h and users of…
New patches for Firefox
Mozilla issues new patches for its Firefox browser (incl Firefox ESR). Exploitation of unpatched vulnerabilities can led to crash.
A “highly critical” flaw affects Drupal 7 and 8 core, Drupal security updates expected on March 28th
Drupal Security Team confirmed that a “highly critical” vulnerability affects Drupal 7 and 8 core and announced the availability of security updates …
New vulnerabilities discovered in AMD processors
Israeli-based CTS Labs has disclosed a discovery of 13 new vulnerabilities affecting processors Ryzen and EPYC.
Adobe Releases Security Updates
Adobe has released security updates to address vulnerabilities in Adobe Flash Player, Connect, and Dreamweaver. A remote attacker could exploit these…
Samba Releases Security Updates
The Samba Team has released security updates to address vulnerabilities CVE-2018-1050 a CVE-2018-1057 in Samba. An attacker could exploit one of thes…
Mozilla Releases Security Updates for Firefox
Mozilla has released security updates to address vulnerabilities in Firefox and Firefox ESR. An attacker could exploit some of these vulnerabilities …
Cisco releases security updates for its products
Cisco releases security updates for some of its products. A remote attacker could exploit some of these vulnerabilities to take control of an affecte…
New version of Chrome fixes security vulnerabilities
Several security bugs are being fixed in Chrome65.0.3325.146. The most serious one can cause leak of sensitive information. Automatic update is recom…
Massive Malspam Campaign Targets Unpatched Systems
Cybercriminals are leveraging a recently patched critical Adobe Flash Player vulnerability in a massive spam campaign targeting unpatched computers. …
Apple security update
Apple fixed critical vulnerability (CVE-2018-4124) in Apple operating systems, that would cause them to crash from mere exposure to either of two spe…
Patch for vulnerable uTorrent client
The vulnerabilities impact uTorrent Web and on a lesser scale also uTorrent Classic. BitTorrent, Inc., the company behind uTorrent, has released vers…
Critical vulnerability has been patched for PyBitmessage
PyBitmessage is the official client for Bitmessage (decentralized P2P communications protocol). The vulnerability allows attacker to remotely execu…
New version of routing daemon Quagga 1.2.3
Security patches included in Quagga 1.2.3 routing daemon fixes several vulnerabilities. In the worst case scenario a remote attacker could seize cont…
Microsoft issues security updates
Microsoft released a new set of security updates on 13th of February. Internet Explorer, Microsoft Edge, Microsoft Windows, Microsoft Office and few …
Adobe releases security updates
New security updates are part of security bulletins APSB18-02 and APSB18-04 issued on 13th of February. One of the most knows patched products is Ado…
Adobe Releases Security Updates for Flash Player
Adobe has released security updates to address vulnerabilities in Flash Player CVE-2018-4878. A remote attacker could exploit one of these vulnerabil…
Cisco Releases Security Updates
Cisco has released an updated advisory and security updates to address a vulnerability affecting its Adaptive Security Appliance software CVE-2018-01…
Cisco Releases Security Updates for IOX XR
Cisco has released software updates to address a vulnerability in its IOS XR Software Release 5.3.4 for the Cisco Aggregation Services Router (ASR) 9…
Hard-coded Password Lets Attackers Bypass Lenovo's Fingerprint Scanner
Lenovo has recently rolled out security patches for a severe vulnerability in its Fingerprint Manager Pro software that could allow leak sensitive da…
Mozila patches Thunderbird
Mozilla issues a patch for its e-mail client Thunderbird. The patch fixes a set of vulnerabilities one of which can be exploited to execute arbitrary…
Vulnerability in desktop apps built on Electron framework
A remote code execution vulnerability was addressed in the Electron framework, which powers highly popular desktop applications, including Slack, Sky…
New version of Chrome fixes security vulnerabilities
Several security bugs are being fixed in Chrome 64.0.3282.119. The most serious one can lead to denial of service. This version also contains mitigat…
Apple issued a number of security patches for its products
Apple patches several vulnerabilities in its products. Some of the vulnerabilities are exploitable and can lead to execution of arbitrary code from a…
Critical updates for Firefox and Firefox ESR
Mozilla issues an update for critical vulnerabilities in its web browsers Firefox 58 and Firefox ESR 52.6. At least one of the vulnerabilities allows…
Cisco Releases Security Updates
Cisco has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit one of these vulnerabilities to…
Oracle releases January’s patch
Oracle released the January 2018 Critical Patch Update provides fixes for a wide range of product families including: Oracle Database Server, Oracle …
Microsoft releases January’s patch
Microsoft released 56 updates that include patches for the Meltdown and Spectre vulnerabilities. The patches also addressed security issues in Window…
VMware and Apple released security updates
Apple has released security updates to address vulnerabilities in multiple products: macOS High Sierra 10.13.2,
iOS 11.2.2 and for the web browser Sa…
New attack on CPU can read arbitrary parts of system memory
New attack aims at modern processor regardless of operating system. It exploits vulnerabilities Spectre (CVE-2017-5753 and CVE-2017-5715) and Meltdow…
Updates for Android
Google issues updates for its Android operating system. It's fixing just over 30 vulnerabilities and a number of critical ones.
Critical vulnerability in vSphere Data Protection
VMware patches several critical vulnerabilities in its vSphere Data Protection. Update fixes 3 issues of one of which can be exploited by a remote at…
2017
Mozilla issues a security update for Thunderbird
Current release of Mozilla Thunderbird 52.5.2 fixes a security vulnerability which can cause a buffer overflow on Windows machines. The vulnerability…
Microsoft Office Docs New Vessel for Loki Malware
Loki malware, built to steal credentials, is distributed via Microsoft Excel and other Office applications rigged with malicious 'scriptlets' to evad…
Transport Layer Security (TLS) Vulnerability
The TLS vulnerability is also known as Return of Bleichenbacher's Oracle Threat (ROBOT). ROBOT allows an attacker to obtain the RSA key necessary to …
Apple release security updates
Apple has released security updates to address vulnerabilities in operating systems iOS and tvOS and for the iCloud application running on Windows op…
Microsoft and Apple release security updates
Microsoft has released updates to address vulnerabilities in Microsoft software. A remote attacker could exploit some of these vulnerabilities to tak…
Security updates from Google and Apple
Google issued new version of its Chrome browser 63.0.3239.84 in which it patches one critical vulnerability and a number of others. Apple announces u…
Security updates for Firefox and Struts 2
Apache Software Foundation and Mozilla issued a patch for their products fixing critical vulnerabilities. There are known issues in REST plug-in and …
Critical Apple login bug puts macOS High Sierra System at risk
A major bug in Apple’s macOS gives anyone with physical access to a computer running the latest version of the High Sierra 10.13.1 operating system a…
Exim Internet Mailer found vulnerable to RCE and DoS bugs
A security researcher has discovered and publicly disclosed two critical vulnerabilities in the popular Internet mail message transfer agent Exim, on…
Cyber Threat Intelligence conference in Prague
OASIS and FIRST will host a unique conference to help organizations identify and avoid some of the biggest pitfalls in threat intelligence. The confe…
Intel releases patch for firmware vulnerability
Intel has released security recommendation to address vulnerabilities in the firmware of the following Intel products: Management Engine (Intel® ME) …
Security updates for products from Adobe, Microsoft and Mozilla
Adobe, Microsoft and Mozilla issued security patches on their products. In all three cases there are vulnerabilities which could be exploited to take…
Microsoft issued security advisory regarding DDE
As email attachments are a primary method an attacker could use to spread malware, Microsoft issued a security advisory regarding potentially harmfu…
Joomla! Releases Security Update
Joomla! has released version 3.8.2 of its Content Management System (CMS) software to address multiple vulnerabilities. A remote attacker could explo…
Google Releases Security Update for Chrome
Google has released Chrome version 62.0.3202.89 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to…
OpenSSL patches two low and medium severity vulnerabilities
The medium severity vulnerability tracked as CVE-2017-3736 was addressed with the release of OpenSSL 1.1.0g and 1.0.2m. The OpenSSL development te…