security update

OpenSSL release patches 8 vulnerabilities

January 9, 2015

The OpenSSL Project has released updates for the popular eponymous open-source library that implements the SSL and TLS protocols. The new releases – 1.0.1k, 1.0.0p and …

Pre-Patch Tuesday alerts no longer publicly available

January 9, 2015

Microsoft’s Advanced Notification Service (ANS), which for over a decade provided advanced warning about the patches and updates that the company would push out on its …

Critical Git flaw allows attackers to compromise developers’ machines

December 19, 2014

A critical vulnerability affecting all versions of the official Git client and all related software that interacts with Git repositories has been found and patched, and …

Microsoft to patch three critical issues

December 5, 2014

December’s advanced Patch Tuesday brings us seven advisories, three of which are listed as Critical. The Critical issues affect, Internet Explorer, all supported …

Firefox 34 comes with critical security updates

December 3, 2014

Firefox 34 includes eight security updates, three of which are Critical, three High and two moderate. MSFA-2014-91 Privileged access to security wrapped protected objects …

VPN providers urged to update OpenVPN due to critical DoS bug

December 2, 2014

The OpenVPN Project has issued a new version of its popular open source software of the same name and is urging users to implement it, as it solves a critical denial of …

Siemens pushes out emergency SCADA updates

November 28, 2014

Siemens has released an out-of-band update for the SIMANTIC WinCC SCADA system, which is integrated in its PCS7 distributed control system and its TIA Portal, engineering …

Adobe urges users to implement critical out-of-band Flash Player update

November 26, 2014

For the second time in a month, Adobe has issued a security update for Flash Player. This out-of-band update finally fixes a critical vulnerability that could be misused by …

New Docker version solves critical bugs, update immediately

November 25, 2014

If you’re using Docker, the open source platform for building, shipping and running distributed applications on almost any platform, be sure to update to the latest …

Windows Kerberos bug: How to detect signs of exploitation before the update?

November 20, 2014

Microsoft has shared more details about the critical elevation of privilege bug found in Microsoft Windows Kerberos Key Distribution Center (CVE-2014-6324) which is being …

SAP finally patches critical, remotely exploitable bugs in GRC solution

November 12, 2014

More than a year and a half after they have been reported to SAP AG, the company has issued a patch for a number of critical exploitable security vulnerabilities in its …

Microsoft patches Windows, IE, Word, SharePoint and IIS