Oracle

Another Oracle WebLogic Server RCE under active exploitation

June 19, 2019

Oracle has released an out-of-band fix for CVE-2019-2729, a critical deserialization vulnerability in a number of versions of Oracle WebLogic Server, and is urging customers …

Intel MDS attack mitigation: An overview

May 16, 2019

Intel has revealed on Tuesday that some of its CPUs are vulnerable to a number of new speculative execution attacks that may allow attackers to stealing sensitive data and …

C-Suite execs and policy makers find cybersecurity technology investments essential

May 7, 2019

The majority of C-Suite executives and policy makers in the United States believe investing in security software, infrastructure and emerging technologies is critical to …

Researchers flag new Oracle WebLogic zero-day RCE flaw

April 25, 2019

Attackers looking to compromise Oracle WebLogic servers for their own needs have a new zero-day RCE flaw at their disposal. “Oracle WebLogic wls9_async and wls-wsat …

April Patch Tuesday Forecast: Be aware of end-of-service issues and browser exploits

April 5, 2019

April Patch Tuesday is nearly here with two significant topics of concern. The first relates to end-of-service milestones and the second issue is browser exploits. Let’s start …

Oracle Java SE 12 brings improvements to developer productivity

March 19, 2019

Oracle announced the general availability of Java SE 12 (JDK 12), continuing the six-month release cadence that provides enterprises and developers faster access to completed …

How are businesses facing the cybersecurity challenges of increasing cloud adoption?

February 21, 2019

Cloud services serve core functions essential to all aspects of business operations, but getting cloud security right is still a challenge for many organizations, the 2019 …

Mild to medium volume expected for February 2019 Patch Tuesday

February 8, 2019

If you look at the recent Patch Tuesday lineups, we have seen the usual updates for the Microsoft Windows OS, browsers, and Office. In the last two months we have seen updates …

January 2019 Patch Tuesday forecast: Partly cloudy followed by heavy fog around Java

January 7, 2019

2018 ended with a bit of excitement. Shortly after November Patch Tuesday we saw a pair of Flash Player zero-days (November 20 and December 5), which were followed by just …

Round two: Microsoft prepares to release Windows 10 October 2018 Update… again!

November 9, 2018

Thanksgiving comes early this year, but the Microsoft Windows 10 October 2018 Update is coming late. Should we be thankful? Let’s revisit the short history of this release, …

VirtualBox Guest-to-Host escape 0day and exploit released online

November 7, 2018

Independent vulnerability researcher Sergey Zelenyuk has made public a zero-day vulnerability he discovered in VirtualBox, the popular open source virtualization software …

Oracle CPU October 2018: 301 vulnerabilities patched

October 17, 2018

Oracle has released its Critical Patch Update for October 2018, fixing 301 vulnerabilities across a wide range of its products, including Oracle Database Server, Oracle …