Oracle

Exposing the vulnerabilities in Oracle PeopleSoft applications

May 29, 2015

During his talk at the Hack in the Box conference, Alexey Tyurin, Head of the Oracle Security Department at ERPScan, spotlighted several vulnerabilities in Oracle PeopleSoft …

Oracle patches 169 vulns across its products, many are critical

January 21, 2015

On Tuesday Oracle released its quarterly Critical Patch Update, which addressed a total of 169 vulnerabilities across multiple products, including Java SE (Standard Edition). …

Beware of malware masquerading as Oracle security patches

January 14, 2015

Oracle is warning users about malware sites actively offering Oracle patches for download. “It has come to our attention that there are non-Oracle sites offering Oracle …

Oracle introduces vault for encryption keys, wallet files

August 8, 2014

Encryption is widely recognized as the gold standard for protecting data privacy, but encryption is only as strong as its key management. Critical credential files such as …

Oracle delivers 113 updates

July 16, 2014

Oracle’s Quarterly Critical Patch Update (CPU) is never a minor event. In April we saw 104 security issues addressed, in January it was 144. This time around we are …

Oracle patches 104 vulns, still working on some Heartbleed fixes

April 17, 2014

Oracle’s April 2014 Critical Patch Update has been released, and solves a total of 104 vulnerabilities found across many of its products, including Oracle Database, …

Details for 30 Oracle Java Cloud Service flaws revealed

April 3, 2014

Polish security start-up Security Explorations has publicly released technical details and Proof-of-Concept code for 30 security vulnerabilities they found in Oracle Java …

Oracle releases Java 8

March 20, 2014

Oracle has released Java Standard Edition (SE) 8, Java Development Kit (JDK) 8, and Java Runtime Environment (JRE) 8. The new releases work on Windows 8, Windows 7, Windows …

Oracle fixes 127 vulnerabilities in its products

October 16, 2013

The story here is that Oracle has synced up their Java patching with the rest of their patching cycle and, when it comes to vulnerabilities, Java always steals the show. The …

Attacks targeting unsupported Java 6 are on the rise

September 12, 2013

As predicted at the end of 2012 and proved by the ever expanding use of exploit kits, vulnerabilities in popular and widespread software such as Java and Adobe’s Acrobat …

Multiple Java versions on endpoints risky for enterprises

July 22, 2013

Java represents a significant security risk to enterprises because it is the endpoint technology most targeted by cyber attacks, show the results of Bit9 research. The …

File infector EXPIRO hits US, steals FTP credentials

July 19, 2013

An unusual attack has been spotted in the wild, using an unexpected combination of threats. This attack used exploit kits (in particular Java and PDF exploits) to deliver file …