Security News

St. Jude Medical admits new cardiac device flaws discovered, issues patch update (ZDNet)
2017-02-08 11:21

Got an OpenBSD Web server? Better patch it (The Register)
2017-02-07 02:06

Exploit for Windows DoS zero-day published, patch out on Tuesday? (Help Net Security)
2017-02-03 20:12

A zero-day bug affecting Windows 10, 8.1, Windows Server 2012 and 2016 can be exploited to crash a vulnerable system and possibly even to compromise it. The bug It is a memory corruption bug in...

Microsoft Waits for Patch Tuesday to Fix SMB Zero Day (Threatpost)
2017-02-03 13:36

Microsoft said a Windows SMB zero day, which has a public proof-of-concept exploit available, is low risk and won’t be patched until an upcoming Patch Tuesday.

Massive Oracle Critical Patch Update fixes 270 vulnerabilities (Help Net Security)
2017-01-19 17:22

Oracle has released the first Critical Patch Update scheduled for 2017, and it’s massive. It fixes 270 vulnerabilities across multiple products, and over 100 of them are remotely exploitable by...

Oracle Patches 270 Vulnerabilities in Year’s First Critical Patch Update (Threatpost)
2017-01-18 18:26

Oracle patched 270 vulnerabilities, many remotely exploitable, across 45 different products as part of its quarterly Critical Patch Update (CPU) on Tuesday.

Patch and security management take 8 hours per month for most companies (Help Net Security)
2017-01-17 13:00

Shavlik and AppSense used VMworld Europe 2016 to collect data from frontline experts, and to highlight patch management and security concerns in corporations. A total of 178 professionals...

FDA urges patients to implement patch to secure their cardiac implants (Help Net Security)
2017-01-12 20:58

Patients who have been implanted with pacemakers and defibrillators manufactured by US-based St. Jude Medical are urged to make sure that their Merlin@home Transmitter unit is plugged in and...

Second Try at Windows LSASS Patch Addresses Vulnerability (Threatpost)
2017-01-11 18:01

Microsoft on Tuesday patched a vulnerability in LSASS, the second attempt it has taken at fixing a remote denial-of-service issue in the critical Windows process.

Microsoft Issues Record Low Number of Patch Tuesday Bulletins (Threatpost)
2017-01-10 20:52

Microsoft patched vulnerabilities that were tied to a variety of its products including Office 2016, its Edge browser and its Local Security Authority Subsystem Service (LSASS).