patch

Micropatch simulates workaround for recent zero-day IE flaw, removes negative side effects

January 21, 2020

ACROS Security has released a micropatch that implements the workaround for a recently revealed actively exploited zero-day RCE flaw affecting Internet Explorer …

First patches for the Citrix ADC, Gateway RCE flaw released

January 21, 2020

As attackers continue to hit vulnerable Citrix (formerly Netscaler) ADC and Gateway installations, Citrix has released permanent fixes for some versions and has promised to …

The importance of proactive patch management

December 13, 2019

IT teams appreciate it when vendors or security researchers discover new vulnerabilities and develop patches for them. So do attackers. The same information that lets IT teams …

Attackers are weaponizing more vulnerabilities than ever before

April 23, 2019

2018 had the most weaponized vulnerabilities ever (177), which represents a 139% increase compared to 2017, according to the RiskSense latest report. In addition, the rate of …

Cisco botched patches for its RV320/RV325 routers

March 28, 2019

Cisco RV320 and RV325 WAN VPN routers are still vulnerable to attack through two flaws that Cisco had supposedly patched. #Cisco Small Business Routers still vulnerable to …

January 2019 Patch Tuesday forecast: Partly cloudy followed by heavy fog around Java

January 7, 2019

2018 ended with a bit of excitement. Shortly after November Patch Tuesday we saw a pair of Flash Player zero-days (November 20 and December 5), which were followed by just …

Apache Struts 2.3.x vulnerable to two year old RCE flaw

November 6, 2018

The Apache Software Foundation is urging users that run Apache Struts 2.3.x to update the Commons FileUpload library to close a serious vulnerability that could be exploited …

0patch releases micropatch for Windows Task Scheduler zero-day

August 31, 2018

Earlier this week a security researcher that goes by “SandboxEscaper” published details and a PoC exploit for a zero-day local privilege escalation vulnerability …

Microsoft ADFS flaw allows attackers to bypass MFA safeguards

August 14, 2018

A vulnerability (CVE-2018-8340) in Microsoft Active Directory Federation Services (ADFS) allows a second authentication factor for one account to be used for all other …

Critical vulnerability in Oracle Database, patch without delay!

August 13, 2018

Oracle is urging users to patch their Oracle Database installations to plug a critical security issue that can result in complete compromise of the Oracle Database and shell …

VMware plugs RCE hole in remote management agent

June 12, 2018

VMware has fixed a critical remote code execution vulnerability in VMware AirWatch Agent for Android and Windows Mobile, and is urging users to upgrade to the newest versions …

What patches to prioritize following the April 2018 Patch Tuesday?

April 11, 2018

Patch Tuesday came and went and, as usual, Microsoft and Adobe have released patches/security updates for vulnerabilities affecting a wide variety of their products. …