Security News

Magento Update Addresses XSS, CSRF Vulnerabilities (Threatpost)
2016-01-25 21:31

Magento patched 20 flaws last week, including a stored cross-site scripting (XSS) vulnerability that could have let an attacker take over a site.

OpenSSL to Patch Two Vulnerabilities This Week (Threatpost)
2016-01-25 17:59

OpenSSL announced that it will release updates for 1.0.2f and 1.0.1r that patch two high-severity vulnerabilities.

Oracle fixes 248 vulnerabilities in January patch update (Help Net Security)
2016-01-21 06:33

Oracle has published their Critical Patch Update (CPU) for January 2016. The Oracle CPU is quarterly and addresses the flaws in large Oracle’s product line, including their core product the relational...