patch

January 2019 Patch Tuesday forecast: Partly cloudy followed by heavy fog around Java

January 7, 2019

2018 ended with a bit of excitement. Shortly after November Patch Tuesday we saw a pair of Flash Player zero-days (November 20 and December 5), which were followed by just …

Apache Struts 2.3.x vulnerable to two year old RCE flaw

November 6, 2018

The Apache Software Foundation is urging users that run Apache Struts 2.3.x to update the Commons FileUpload library to close a serious vulnerability that could be exploited …

0patch releases micropatch for Windows Task Scheduler zero-day

August 31, 2018

Earlier this week a security researcher that goes by “SandboxEscaper” published details and a PoC exploit for a zero-day local privilege escalation vulnerability …

Microsoft ADFS flaw allows attackers to bypass MFA safeguards

August 14, 2018

A vulnerability (CVE-2018-8340) in Microsoft Active Directory Federation Services (ADFS) allows a second authentication factor for one account to be used for all other …

Critical vulnerability in Oracle Database, patch without delay!

August 13, 2018

Oracle is urging users to patch their Oracle Database installations to plug a critical security issue that can result in complete compromise of the Oracle Database and shell …

VMware plugs RCE hole in remote management agent

June 12, 2018

VMware has fixed a critical remote code execution vulnerability in VMware AirWatch Agent for Android and Windows Mobile, and is urging users to upgrade to the newest versions …

What patches to prioritize following the April 2018 Patch Tuesday?

April 11, 2018

Patch Tuesday came and went and, as usual, Microsoft and Adobe have released patches/security updates for vulnerabilities affecting a wide variety of their products. …

Easily exploited flaw in Microsoft Malware Protection Engine allows total system compromise

April 5, 2018

A critical and extremely easily exploitable vulnerability in the Microsoft Malware Protection Engine (MMPE) has been patched through an out-of-band security update pushed out …

Researchers find critical flaws in SecurEnvoy SecurMail, patch now!

March 13, 2018

If you’re a user of SecurEnvoy SecurMail and you haven’t yet implemented the latest patch, do so now – or risk getting your encrypted emails read by …

Cisco fixes critical flaw in its Secure Access Control System

March 8, 2018

Cisco has pushed out fixes for security vulnerabilities in a wide variety of its products, including two critical flaws in its Secure Access Control System (ACS) and its Prime …

Vulnerability in ISC BIND leads to DoS, patch today!

January 17, 2018

The Internet Systems Consortium has released security updates for BIND, the most widely used Domain Name System (DNS) software on the Internet, and a patch for ISC DHCP, its …

Oracle addresses 237 vulnerabilities across multiple products