patch

March 2024 Patch Tuesday forecast: A popular framework updated

March 8, 2024

UPDATE: March 12, 3:55 PM ET – March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V We’re almost at our third Patch Tuesday and wrapping up the …

February 2024 Patch Tuesday forecast: Zero days are back and a new server too

February 9, 2024

UPDATE: February 13, 14:55 ET – February 2024 Patch Tuesday is live. January 2024 Patch Tuesday is behind us. A relatively light release from Microsoft with 39 CVEs …

EOL Sophos firewalls get hotfix for old but still exploited vulnerability (CVE-2022-3236)

December 13, 2023

Over a year has passed since Sophos delivered patches for a vulnerability affecting Sophos Firewalls (CVE-2022-3236) that was being actively exploited by attackers, and now …

November 2023 Patch Tuesday forecast: Year 21 begins

November 10, 2023

The October forecast for large numbers of CVEs addressed in Windows 10 and 11 and the recent record on the number fixed in Windows Server 2012 was spot on! Microsoft addressed …

F5 BIG-IP vulnerabilities leveraged by attackers: What to do?

November 2, 2023

The two BIG-IP vulnerabilities (CVE-2023-46747, CVE-2023-46748) F5 Networks has recently released hotfixes for are being exploited by attackers in the wild, the company has …

F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)

October 30, 2023

F5 Networks has released hotfixes for two vulnerabilities affecting its BIG-IP multi-purpose networking devices/modules, including a critical authentication bypass …

Google “confirms” that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)

September 27, 2023

UPDATE (September 28, 2023, 03:15 a.m. ET): The CVE-2023-5129 ID has been either rejected or withdrawn by the CVE Numbering Authority (Google), since it’s a duplicate of …

Critical Trend Micro vulnerability exploited in the wild (CVE-2023-41179)

September 21, 2023

Trend Micro has fixed a critical zero-day vulnerability (CVE-2023-41179) in several of its endpoint security products for enterprises that has been spotted being exploited in …

Microsoft, Adobe fix zero-days exploited by attackers (CVE-2023-26369, CVE-2023-36761, CVE-2023-36802)

September 12, 2023

September 2023 Patch Tuesday is here, with fixes for actively exploited vulnerabilities in Adobe Acrobat and Reader (CVE-2023-26369), Microsoft Word (CVE-2023-36761), and …

VMware Aria Operations for Networks vulnerability exploited in the wild (CVE-2023-20887)

June 21, 2023

CVE-2023-20887, a pre-authentication command injection vulnerability in VMware Aria Operations for Networks (formerly vRealize Network Insight), has been spotted being …

Easily bypassed patch makes zero-click Outlook flaw exploitable again (CVE-2023-29324)

May 10, 2023

Among the vulnerabilities fixed by Microsoft on May 2023 Patch Tuesday is CVE-2023-29324, a bug in the Windows MSHTML platform that Microsoft rates as “important.” …

Easily exploitable flaw in Oracle Opera could spell trouble for hotel chains (CVE-2023-21932)

May 2, 2023

A recently patched vulnerability (CVE-2023-21932) in Oracle Opera, a property management system widely used in large hotel and resort chains, is more critical than Oracle says …