patch

Vanir: Open-source security patch validation for Android

December 18, 2024

Google’s open-source tool Vanir enables Android developers to quickly scan custom platform code for missing or applicable security patches. By automating patch …

OpenPaX: Open-source kernel patch that mitigates memory safety errors

November 1, 2024

OpenPaX is an open-source kernel patch that mitigates common memory safety errors, re-hardening systems against application-level memory safety attacks using a simple Linux …

Fortinet releases patches for publicly undisclosed critical FortiManager vulnerability

October 21, 2024

In the last couple of days, Fortinet has released critical security updates for FortiManager, to fix a critical vulnerability that is reportedly being exploited by Chinese …

Zyxel patches critical flaws in EOL NAS devices

June 6, 2024

Zyxel has released patches for three critical vulnerabilities (CVE-2024-29972, CVE-2024-29973, and CVE-2024-29974) affecting two network-attached storage (NAS) devices that …

May 2024 Patch Tuesday forecast: A reminder of recent threats and impact

May 10, 2024

The updates have been released: May 2024 Patch Tuesday: Microsoft fixes exploited zero-days (CVE-2024-30051, CVE-2024-30040) The thunderstorms of April patches have passed, …

March 2024 Patch Tuesday forecast: A popular framework updated

March 8, 2024

UPDATE: March 12, 3:55 PM ET – March 2024 Patch Tuesday: Microsoft fixes critical bugs in Windows Hyper-V We’re almost at our third Patch Tuesday and wrapping up the …

February 2024 Patch Tuesday forecast: Zero days are back and a new server too

February 9, 2024

UPDATE: February 13, 14:55 ET – February 2024 Patch Tuesday is live. January 2024 Patch Tuesday is behind us. A relatively light release from Microsoft with 39 CVEs …

EOL Sophos firewalls get hotfix for old but still exploited vulnerability (CVE-2022-3236)

December 13, 2023

Over a year has passed since Sophos delivered patches for a vulnerability affecting Sophos Firewalls (CVE-2022-3236) that was being actively exploited by attackers, and now …

November 2023 Patch Tuesday forecast: Year 21 begins

November 10, 2023

The October forecast for large numbers of CVEs addressed in Windows 10 and 11 and the recent record on the number fixed in Windows Server 2012 was spot on! Microsoft addressed …

F5 BIG-IP vulnerabilities leveraged by attackers: What to do?

November 2, 2023

The two BIG-IP vulnerabilities (CVE-2023-46747, CVE-2023-46748) F5 Networks has recently released hotfixes for are being exploited by attackers in the wild, the company has …

F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)

October 30, 2023

F5 Networks has released hotfixes for two vulnerabilities affecting its BIG-IP multi-purpose networking devices/modules, including a critical authentication bypass …

Google “confirms” that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)

September 27, 2023

UPDATE (September 28, 2023, 03:15 a.m. ET): The CVE-2023-5129 ID has been either rejected or withdrawn by the CVE Numbering Authority (Google), since it’s a duplicate of …