Oracle

Oracle pushes out emergency fix for Java SE

February 9, 2016

Oracle has patched a vulnerability (CVE-2016-0603) in Java SE (Standard Edition) 6, 7 or 8 on the Windows platform, which could be exploited by attackers looking for ways to …

Oracle announces Java plugin deprecation, death

January 28, 2016

With a short post by a member of the Java strategy team, Oracle has announced the approaching death of the hated Java plugin. “Oracle plans to deprecate the Java browser …

Oracle fixes 248 vulnerabilities in January patch update

January 21, 2016

Oracle has published their Critical Patch Update (CPU) for January 2016. The Oracle CPU is quarterly and addresses the flaws in large Oracle’s product line, including their …

Oracle agrees to settle FTC charges it deceived consumers about Java updates

December 22, 2015

Oracle has agreed to settle Federal Trade Commission charges that it deceived consumers about the security provided by updates to its Java Platform, Standard Edition software …

Oracle releases 154 fixes, plugs click-to-play bypass Java flaw used in attacks

October 21, 2015

Oracle has released its quarterly patch update that contains 154 security fixes for its various products.What will interest end users the most are the fixes released for Java, …

Oracle fixes Java zero-day exploited by Pawn Storm hackers

July 15, 2015

With its quarterly Critical Patch Update, Oracle has released security fixes for 193 vulnerabilities across all of its products (a good summary can be found here), including …

Exposing the vulnerabilities in Oracle PeopleSoft applications

May 29, 2015

During his talk at the Hack in the Box conference, Alexey Tyurin, Head of the Oracle Security Department at ERPScan, spotlighted several vulnerabilities in Oracle PeopleSoft …

Oracle patches 169 vulns across its products, many are critical

January 21, 2015

On Tuesday Oracle released its quarterly Critical Patch Update, which addressed a total of 169 vulnerabilities across multiple products, including Java SE (Standard Edition). …

Beware of malware masquerading as Oracle security patches

January 14, 2015

Oracle is warning users about malware sites actively offering Oracle patches for download. “It has come to our attention that there are non-Oracle sites offering Oracle …

Oracle introduces vault for encryption keys, wallet files

August 8, 2014

Encryption is widely recognized as the gold standard for protecting data privacy, but encryption is only as strong as its key management. Critical credential files such as …

Oracle delivers 113 updates

July 16, 2014

Oracle’s Quarterly Critical Patch Update (CPU) is never a minor event. In April we saw 104 security issues addressed, in January it was 144. This time around we are …

Oracle patches 104 vulns, still working on some Heartbleed fixes

April 17, 2014

Oracle’s April 2014 Critical Patch Update has been released, and solves a total of 104 vulnerabilities found across many of its products, including Oracle Database, …