Oracle

January 2019 Patch Tuesday forecast: Partly cloudy followed by heavy fog around Java

January 7, 2019

2018 ended with a bit of excitement. Shortly after November Patch Tuesday we saw a pair of Flash Player zero-days (November 20 and December 5), which were followed by just …

Round two: Microsoft prepares to release Windows 10 October 2018 Update… again!

November 9, 2018

Thanksgiving comes early this year, but the Microsoft Windows 10 October 2018 Update is coming late. Should we be thankful? Let’s revisit the short history of this release, …

VirtualBox Guest-to-Host escape 0day and exploit released online

November 7, 2018

Independent vulnerability researcher Sergey Zelenyuk has made public a zero-day vulnerability he discovered in VirtualBox, the popular open source virtualization software …

Oracle CPU October 2018: 301 vulnerabilities patched

October 17, 2018

Oracle has released its Critical Patch Update for October 2018, fixing 301 vulnerabilities across a wide range of its products, including Oracle Database Server, Oracle …

Critical vulnerability in Oracle Database, patch without delay!

August 13, 2018

Oracle is urging users to patch their Oracle Database installations to plug a critical security issue that can result in complete compromise of the Oracle Database and shell …

August Patch Tuesday forecast: Looking ahead after a frustrating July

August 10, 2018

Approaching August Patch Tuesday, we are supposed to be in the ‘dog days’ of summer where everything slows down. Unfortunately, July was full of CVEs and stability fixes with …

ERP applications under attack: How criminals target the crown jewels

July 26, 2018

Business-critical applications running the biggest organizations in the world are under attack, according to research from Digital Shadows and Onapsis. The report shows a rise …

July 2018 Patch Tuesday forecast: The fireworks and the finale

July 9, 2018

Patch management is kind of like fireworks around the fourth of July. Momentary excitement with lulls that repeat several times until the culminate in a finale! Well there are …

May 2018 Patch Tuesday forecast: Where are the flowers?

May 7, 2018

The wintry weather doesn’t want to give up its hold on us here in the US. The extended cold has kept the spring flowers from blooming, dragging out the winter blues. It …

Crypto flaw in Oracle Access Manager can let attackers pass through

May 3, 2018

A padding oracle vulnerability in Oracle Access Manager (CVE-2018-2879) can be exploited by attackers to bypass authentication and impersonate any user account. About the …

April Patch Tuesday forecast: Expect updates for Adobe Flash, others

April 9, 2018

Springtime is here! Although up here in Minnesota you wouldn’t believe it as we received snowfalls that rivaled anything in the past 34 years! As spring arrives you think of …

Oracle addresses 237 vulnerabilities across multiple products

January 17, 2018

The January 2018 Oracle Critical Patch Update (CPU) fixes 237 new security vulnerabilities across hundreds of Oracle products, including the company’s widely used Oracle …