security update

Millions of routers running OpenWRT vulnerable to attack

April 1, 2020

A vulnerability (CVE-2020-7982) discovered in the package manager of the OpenWRT open source operating system could allow attackers to compromise the embedded and networking …

Apple delivers March 2020 security updates for iDevices and software

March 26, 2020

If you haven’t yet opted for automatic Apple security updates, it’s time to update your iDevices and software again. The lightweight Apple security updates The …

Cisco fixes root privilege, command injection vulnerabilities in Cisco SD-WAN solution

March 20, 2020

Cisco has fixed five security vulnerabilities in its Software-Defined WAN (SD-WAN) Solution, two of which could allow an authenticated, local attacker to either gain root …

A week after Patch Tuesday, Adobe drops security fixes for six offerings

March 18, 2020

Adobe failed to release security updates on March 2020 Patch Tuesday, but has pushed them out this Tuesday, for Acrobat and Reader, Photoshop, ColdFusion, Experience Manager, …

Microsoft releases patch for leaked SMBv3 RCE flaw

March 12, 2020

After the inadvertent leaking of details about a wormable Windows SMBv3 RCE flaw (CVE-2020-0796) on Tuesday, Microsoft has rushed to release a patch (i.e., security updates). …

Scientists expose another security flaw in Intel processors

March 12, 2020

Computer scientists at KU Leuven have once again exposed a security flaw in Intel processors. Jo Van Bulck, Frank Piessens, and their colleagues in Austria, the United States, …

March 2020 Patch Tuesday: Microsoft fixes 115 vulnerabilities, Adobe none

March 10, 2020

It’s March 2020 Patch Tuesday and Microsoft has dropped fixes for 115 CVE-numbered flaws: 26 are critical, 88 important, and one of moderate severity. The good news is …

Hackers are compromising vulnerable ManageEngine Desktop Central instances

March 10, 2020

Is your organization using ManageEngine Desktop Central? If the answer is yes, make sure you’ve upgraded to version 10.0.474 or risk falling prey to attackers who are …

Google fixes another Chrome zero-day exploited in the wild

February 26, 2020

For the third time in a year, Google has fixed a Chrome zero-day (CVE-2020-6418) that is being actively exploited by attackers in the wild. About CVE-2020-6418 No details have …

Cisco drops security fixes for Smart Software Manager, security appliances

February 21, 2020

Cisco has released a new batch of security fixes for a number of its products, including its Smart Software Manager On-Prem solution and its Email Security and Content …

February 2020 Patch Tuesday: Microsoft fixes 99 vulnerabilities, Adobe 42

February 11, 2020

February 2020 Patch Tuesday is here. To mark the occasion, Microsoft has released fixes for 99 vulnerabilities – 12 critical, one of which is being exploited in the wild …

12,000+ Jenkins servers can be exploited to launch, amplify DDoS attacks