Security News

Mad March Meltdown! Microsoft's patch for a patch for a patch may need another patch
2018-04-01 00:00

If at first, er, second, ah, third, no, fourth, you fail, sadly, you're probably Redmond Updated Days after Microsoft released its third attempt at a fix for the Meltdown security vulnerability in...

Microsoft Fixes Bad Patch That Left Windows 7, Server 2008 Open to Attack
2018-03-30 18:51

Microsoft released an out-of-band security update that corrected a faulty patch that left Windows 7 and Windows Server 2008 open to attack.

Drupal Issues Highly Critical Patch: Over 1M Sites Vulnerable
2018-03-29 19:58

Drupal developers are urged to patch a bug that allows attackers to take over a site simply by visiting it.

Microsoft's Meltdown Patch Made Windows 7 PCs More Insecure
2018-03-29 15:03

Meltdown CPU vulnerability was bad, and Microsoft somehow made the flaw even worse on its Windows 7, allowing any unprivileged, user-level application to read content from and even write data to...

Bad Microsoft Meltdown Patch Made Some Windows Systems Less Secure
2018-03-28 16:25

Researcher finds Microsoft’s January Patch Tuesday release included a fix for the Intel Meltdown bug, however the update opened up a new vulnerability.

First OpenSSL Updates in 2018 Patch Three Flaws
2018-03-27 15:35

The first round of security updates released in 2018 for OpenSSL patch a total of three vulnerabilities, but none of them appears to be serious. OpenSSL versions 1.1.0h and 1.0.2o patch...

Drupal to Patch Highly Critical Vulnerability This Week
2018-03-26 12:25

Drupal announced plans to release a security update for Drupal 7.x, 8.3.x, 8.4.x, and 8.5.x on March 28, 2018, aimed at addressing a highly critical vulnerability. The Drupal security team hasn’t...

Microsoft Patches 15 Critical Bugs in March Patch Tuesday Update
2018-03-13 22:25

Products receiving the most patches included Microsoft browsers and browser-related technologies such as the company’s JavaScript engine Chakra.

Patch Tuesday drops the mandatory antivirus requirement after all
2018-03-13 20:35

Today’s patches also include an annoying-looking remote code execution bug.

Researchers find critical flaws in SecurEnvoy SecurMail, patch now!
2018-03-13 15:23

If you’re a user of SecurEnvoy SecurMail and you haven’t yet implemented the latest patch, do so now – or risk getting your encrypted emails read by attackers. The warning comes from SEC Consult...