security update

Microsoft patches flaw exploited by Stuxnet – again

March 11, 2015

Among the vulnerabilities patched by Microsoft in this month’s Patch Tuesday is one that was supposedly patched back in 2010. The Windows Shell Shortcut Icon Loading …

Microsoft patches Windows, IE, Office, SharePoint

March 11, 2015

This month Microsoft has released 14 new bulletins, 5 of which are rated as Critical, 9 as Important. As a dÃ©jà vu from last month, a critical remote code execution …

Apple issued update for FREAK flaw in OS X and iOS

March 10, 2015

Apple has released security updates for OS X and iOS which, among other things, fix the FREAK flaw that may allow an attacker to decrypt secure communications between …

Seagate acknowledges NAS 0-day, announces patch

March 9, 2015

After security researcher OJ Reeves publicly revealed the existence of a remote code execution zero-day flaw affecting Seagate’s Business Storage 2-Bay NAS line of …

D-Link fixes critical router flaws

March 3, 2015

D-Link has released new firmware for its DIR-820L Wi-Fi dual band cloud router, which fixes a number of security vulnerabilities. One of these can apparently be exploited by …

Over a million WP sites at risk of hijacking due to plugin bug

February 25, 2015

Users who run their websites on the popular WordPress CMS and are also using the WP-Slimstat web analytics plugin should update as soon as possible, warns Sucuri vulnerability …

Critical Samba flaw allows unauthorized remote code execution

February 24, 2015

Samba, the popular free software that allows file and print sharing between computers running Windows and those running Unix or Linux, has been found sporting a critical flaw …

Flaw makes Cisco routing hardware vulnerable to DoS attacks

February 23, 2015

A serious vulnerability affecting the software of some of Cisco’s routing hardware systems for telecommunications and Internet service providers could be exploited to …

Microsoft fixes critical remotely exploitable Windows root-level design bug

February 10, 2015

In this month’s Patch Tuesday, Microsoft has released nine security bulletins to address 56 unique vulnerabilities in Microsoft Windows, Microsoft Office, Internet …

Adobe patches latest Flash Player zero-day

February 5, 2015

Adobe has released Flash Player 16.0.0.305, a new version that fixes the latest zero-day flaw (CVE-2015-0313) that is currently exploited in mass malvertising campaigns. An …

New OS X Yosemite version fixes critical security issues, including Thunderstrike

January 28, 2015

Apple has released the latest version of OS X Yosemite (v10.10.2) and the first security update (2015-001) for this year, and among the problems fixed is one affecting the CPU …

Why Google won’t be updating pre-KitKat WebKit anymore

January 27, 2015

Two weeks ago, Rapid 7 researchers discovered that Google will no longer be providing security patches for WebView used in pre-KitKat (v4.4) Android versions, meaning that …