Security News

63 New Flaws (Including 0-Days) Windows Users Need to Patch Now
2018-11-14 10:03

It's Patch Tuesday once again…time for another round of security updates for the Windows operating system and other Microsoft products. This month Windows users and system administrators need to...

Stop us if you've heard this one: Remote code hijacking flaw in Apache Struts, patch ASAP
2018-11-07 01:49

Advisory issued over yet another critical security vulnerability The Apache Foundation is urging developers to update their Struts 2 installations and projects using the code – after a critical...

Android gets security overhaul with November patch bundle – if your mobe maker is kind enough to let you have it
2018-11-06 00:21

And Apple fixes Watch-killing security patch of its own Google has pushed out the November edition of its monthly Android security updates, giving carriers and device makers a fresh set of patches...

Cisco security appliances under attack, still no patch available
2018-11-02 10:27

A vulnerability (CVE-2018-15454) affecting a slew Cisco security appliances, modules and firewalls is being exploited in the wild to crash and reload the devices, the company has warned on...

You patch my back(up) and I'll patch yours... Arcserve bugs burrow remotely exploited holes in UDP storage systems
2018-10-24 02:20

Updates urged for serious web services vulnerabilities Companies running Arcserve Unified Data Protection to manage their backups and archives are being advised to update their software after bug...

Patch now! Multiple serious flaws found in Drupal
2018-10-23 13:10

Drupal website owners have some important patching homework to do.

Recent Branch.io Patch Creates New XSS Flaw
2018-10-22 16:35

The patch for a recently disclosed cross-site scripting (XSS) vulnerability in Branch.io introduced another similar flaw, a security researcher revealed last week. read more

Heads-Up: Patch 'Comically Bad' libSSH Flaw Now
2018-10-19 10:48

Thankfully Most SSH - from BSD to Linux Distros To Macs - Is UnaffectedAttention admins: If you use libSSH - one of the open-source flavors of Secure Shell, aka SSH - patch now. The advice follows...

Oracle Fixes 301 Flaws in October Critical Patch Update
2018-10-17 18:49

The update includes one critical flaw in Oracle GoldenGate with a CVSS 3.0 score of 10.0.

Thought Patch Tuesday was a load? You'll want to avoid this Oracle mega-advisory then
2018-10-16 23:13

But you'll definitely want to check out the libssh bug Oracle has released a wide-ranging security update to address more than 300 CVE-listed vulnerabilities in its various enterprise products.…