security update

Hospitals advised to stop using vulnerable computerized drug pumps

August 3, 2015

The US Food and Drug Administration has issued a safety communication warning healthcare facilities using the Hospira Symbiq Infusion System – a computerized pump made …

Google Chrome update includes 43 security fixes

July 22, 2015

Google has released Chrome version 44.0.2403.89 for Windows, Mac, and Linux to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an …

Microsoft plugs another Windows zero-day with emergency patch

July 21, 2015

Microsoft has released an emergency update that plugs a critical zero-day vulnerability (CVE-2015-2426) that affects all supported versions of Windows and could allow …

Oracle fixes Java zero-day exploited by Pawn Storm hackers

July 15, 2015

With its quarterly Critical Patch Update, Oracle has released security fixes for 193 vulnerabilities across all of its products (a good summary can be found here), including …

Adobe patches Hacking Team Flash zero-days, update immediately!

July 14, 2015

Adobe has released new versions of Flash Player, Shockwave Player and Acrobat and Reader, all of which fix critical vulnerabilities that could potentially allow an attacker to …

65,000+ Land Rovers recalled due to software bug

July 14, 2015

Jaguar Land Rover has announced that owners of Range Rover and Range Rover Sport vehicles manufactured since 2013 will have to visit car dealers and get their car’s …

VMware fixes host privilege escalation bug in Workstation, Player, Horizon View

July 10, 2015

VMware has issued software updates for VMware Workstation, Player, and Horizon View Client for Windows, which fix relatively serious a host privilege escalation vulnerability …

Severe OpenSSL bug that allows certificate forgery has been plugged

July 9, 2015

The wait is over: the OpenSSL Project has issued security updates for the popular open-source implementation of the SSL and TLS protocols, and has shared some details about …

Security updates for OS X, iOS fix bucketload of serious bugs

July 1, 2015

Apple has released security updates for Safari, OS X Yosemite (and previous OS X versions), and iOS.The OS X update contains fixes for 77 vulnerabilities, many of which can be …

Major Xen update fixes over 20 vulns, including guest/host escape flaw

June 29, 2015

The newest version (v4.5.1) of popular hypervisor Xen has been released last week, and includes a bucketload of improvements and bug-fixes, including nearly 20 security …

Cisco finds, removes more default SSH keys on its software

June 26, 2015

Cisco has pushed out security updates to address two vulnerabilities in its Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Content …

Samsung disables Windows Update, undermines the security of your devices

June 25, 2015

Another example of how vendors sometimes choose to improve usability to the detriment of user security has been recently discovered by security researcher and Microsoft MVP …