security update

HP pushes out fix for keylogging audio driver in its laptops

May 12, 2017

Swiss security consultancy Modzero revealed on Thursday that a number of HP laptops contain an audio driver that logs users’ keystrokes and stores them in an unencrypted …

40 Asus RT routers open to attack through web interface vulnerabilities

May 11, 2017

If you own an Asus RT wireless router, and you haven’t updated its firmware for a while, now is the time to do it. Researchers from Nightwatch Cybersecurity have …

Google’s plan to foil screen-hijacking malware in Android O

May 10, 2017

74% of ransomware, 57% of adware, and 14% of banker malware abuse a specific app permission to target nearly 40 percent of all Android users – by overlaying screens, …

Microsoft plugs crazy bad bug with emergency patch

May 9, 2017

On Monday night, Microsoft released a critical out-of-band security update for the Microsoft Malware Protection Engine, to plug an easily exploitable bug that could allow …

Oracle fixes Solaris 10 flaw targeted by leaked NSA exploit

April 19, 2017

Oracle has pushed out a record-breaking 299 fixes for vulnerabilities in its many, many products, and among them is a Solaris 10 bug whose existence has been revealed through …

SAP closes critical vulnerability affecting TREX

April 12, 2017

SAP closed a critical vulnerability for an issue that was exposed for almost two years. The vulnerability (SAP Security Note 2419592) affects TREX, a SAP NetWeaver standalone …

QNAP NAS devices open to remote command execution

April 7, 2017

If you’re using one of the many QNAP NAS devices and you haven’t yet upgraded the QTS firmware to version 4.2.4, you should do so immediately if you don’t …

Apple patches drive-by Wi-Fi flaw with emergency iOS patch

April 4, 2017

Less than a week after Apple pushed out iOS 10.3 comes an iOS emergency patch that all iDevice owners should implement as soon a possible. The security note accompanying iOS …

Scareware scammers target iOS users

March 28, 2017

A bug in the way that Mobile Safari handles pop-up dialogs has been abused to scare iOS users into paying a “fine” in the form of an iTunes pre-paid card. The iOS …

March Patch Tuesday closes record number of vulnerabilities

March 15, 2017

With no February Patch Tuesday, it was to be expected that Microsoft would fix a huge number of security issues in March. They didn’t disappoint: 139 unique CVEs have …

Apache servers under attack through easily exploitable Struts 2 flaw

March 9, 2017

A critical vulnerability in Apache Struts 2 is being actively and heavily exploited, even though the patch for it has been released on Monday. System administrators are …

ESET antivirus opens Macs to remote code execution

February 28, 2017

Like any other software, security software is sure to have some vulnerabilities that can be exploited by attackers. The latest in a long list of examples that prove this fact …