Security News

Oracle Patches 33 Critical Vulnerabilities With January Updates
2019-01-16 13:32

Oracle Delivers 284 Fixes With January 2019 Critical Patch Update (CPU) Oracle this week released its first set of security patches for 2019, delivering a total of 284 new security fixes across...

Oracle and "Responsible Disclosure"
2018-11-14 12:46

I've been writing about "responsible disclosure" for over a decade; here's an essay from 2007. Basically, it's a tacit agreement between researchers and software vendors. Researchers agree to...

Civil rights group says Oracles, Tapads and Experians get let off for wanton info-sucking
2018-11-08 09:15

'Lesser-known' names escape public scrutiny, claims Privacy International Privacy International (PI) has filed complaints of "systematic infringements" of data protection law by seven info-sucking...

Researcher Drops Oracle VirtualBox Zero-Day
2018-11-07 10:31

A researcher has disclosed the details of a zero-day vulnerability affecting Oracle’s VirtualBox virtualization software. The flaw appears serious as exploitation can allow a guest-to-host escape....

Oracle Fixes 301 Flaws in October Critical Patch Update
2018-10-17 18:49

The update includes one critical flaw in Oracle GoldenGate with a CVSS 3.0 score of 10.0.

Oracle CPU October 2018: 301 vulnerabilities patched
2018-10-17 12:53

Oracle has released its Critical Patch Update for October 2018, fixing 301 vulnerabilities across a wide range of its products, including Oracle Database Server, Oracle E-Business Suite, Oracle...

Oracle's October 2018 Update Includes 301 Security Fixes
2018-10-17 09:54

Oracle’s October 2018 Critical Patch Update (CPU) was rolled out on Tuesday with 301 security fixes, bringing the total of patches released this year to 1,119. read more

Thought Patch Tuesday was a load? You'll want to avoid this Oracle mega-advisory then
2018-10-16 23:13

But you'll definitely want to check out the libssh bug Oracle has released a wide-ranging security update to address more than 300 CVE-listed vulnerabilities in its various enterprise products.…

Oracle Products Affected by Exploited Apache Struts Flaw
2018-09-04 10:22

Oracle informed customers over the weekend that some of the company’s products are affected by a critical Apache Struts 2 vulnerability that has been exploited in the wild. read more