security update

Admins, patch your Cisco enterprise security solutions! (CVE-2023-20032)

February 17, 2023

Cisco has released security updates for several of its enterprise security and networking products, fixing (among other things): A critical vulnerability (CVE-2023-20032) in …

Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)

February 14, 2023

The February 2023 Patch Tuesday is upon us, with Microsoft releasing patches for 75 CVE-numbered vulnerabilities, including three actively exploited zero-day flaws …

Apple fixes actively exploited WebKit zero-day in iOS, macOS (CVE-2023-23529)

February 14, 2023

Apple has released security updates that fix a WebKit zero-day vulnerability (CVE-2023-23529) that “may have been actively exploited.” The bug has been fixed in …

February 2023 Patch Tuesday forecast: A Valentine’s date

February 10, 2023

Patch Tuesday falls on Valentine’s Day this year but will it be a special date? While there have been ongoing cyber-attacks of all kinds, it has been relatively quiet on the …

Patch your Jira Service Management Server and Data Center and check for compromise! (CVE-2023-22501)

February 3, 2023

Australian software maker Atlassian has released patches for CVE-2023-22501, a critical authentication vulnerability in Jira Service Management Server and Data Center, and is …

Vulnerability in Cisco industrial appliances is a potential nightmare (CVE-2023-20076)

February 1, 2023

Cisco has released patches for a high-severity vulnerability (CVE-2023-20076) found in some of its industrial routers, gateways and enterprise wireless access points, which …

Critical QNAP NAS vulnerability fixed, update your device ASAP! (CVE-2022-27596)

January 31, 2023

QNAP Systems has fixed a critical vulnerability (CVE-2022-27596) affecting QNAP network-attached storage (NAS) devices, which could be exploited by remote attackers to inject …

Critical OpenEMR vulnerabilities may allow attackers to access patients’ health records

January 30, 2023

Critical vulnerabilities discovered in OpenEMR can be chained to gain code execution on a server running a vulnerable version of the popular open-source electronic health …

Critical VMware vRealize Log Insight flaws patched (CVE-2022-31706, CVE-2022-31704)

January 25, 2023

VMware has fixed two critical (CVE-2022-31706, CVE-2022-31704) and two important (CVE-2022-31710, CVE-2022-31711) security vulnerabilities in VMware vRealize Log Insight, its …

Apple delivers belated zero-day patch for iOS v12 (CVE-2022-42856)

January 24, 2023

Apple has released security updates for macOS, iOS, iPadOS and watchOS, patching – among other things – a type confusion flaw in the WebKit component …

Critical RCE vulnerabilities found in git (CVE-2022-41903, CVE-2022-23251)

January 19, 2023

A source code audit has revealed two critical vulnerabilities affecting git, the popular distributed version control system for collaborative software development. The latest …

Vulnerable NetComm routers and a public PoC exploit (CVE-2022-4873, CVE-2022-4874)

January 18, 2023

Two vulnerabilities (CVE-2022-4873, CVE-2022-4874) found in three NetComm router models could be exploited to achieve remote code execution on vulnerable devices, and …