security update

Microsoft plugs crazy bad bug with emergency patch

May 9, 2017

On Monday night, Microsoft released a critical out-of-band security update for the Microsoft Malware Protection Engine, to plug an easily exploitable bug that could allow …

Oracle fixes Solaris 10 flaw targeted by leaked NSA exploit

April 19, 2017

Oracle has pushed out a record-breaking 299 fixes for vulnerabilities in its many, many products, and among them is a Solaris 10 bug whose existence has been revealed through …

SAP closes critical vulnerability affecting TREX

April 12, 2017

SAP closed a critical vulnerability for an issue that was exposed for almost two years. The vulnerability (SAP Security Note 2419592) affects TREX, a SAP NetWeaver standalone …

QNAP NAS devices open to remote command execution

April 7, 2017

If you’re using one of the many QNAP NAS devices and you haven’t yet upgraded the QTS firmware to version 4.2.4, you should do so immediately if you don’t …

Apple patches drive-by Wi-Fi flaw with emergency iOS patch

April 4, 2017

Less than a week after Apple pushed out iOS 10.3 comes an iOS emergency patch that all iDevice owners should implement as soon a possible. The security note accompanying iOS …

Scareware scammers target iOS users

March 28, 2017

A bug in the way that Mobile Safari handles pop-up dialogs has been abused to scare iOS users into paying a “fine” in the form of an iTunes pre-paid card. The iOS …

March Patch Tuesday closes record number of vulnerabilities

March 15, 2017

With no February Patch Tuesday, it was to be expected that Microsoft would fix a huge number of security issues in March. They didn’t disappoint: 139 unique CVEs have …

Apache servers under attack through easily exploitable Struts 2 flaw

March 9, 2017

A critical vulnerability in Apache Struts 2 is being actively and heavily exploited, even though the patch for it has been released on Monday. System administrators are …

ESET antivirus opens Macs to remote code execution

February 28, 2017

Like any other software, security software is sure to have some vulnerabilities that can be exploited by attackers. The latest in a long list of examples that prove this fact …

Microsoft pushes out patches for critical Flash Player vulnerabilities

February 22, 2017

Microsoft has skipped its February 2017 Patch Tuesday and postponed the release of those patches for March, but there are apparently security vulnerabilities that must be …

Microsoft postpones Patch Tuesday

February 15, 2017

Patch Tuesday is the day when most system administrators sit down and perform critical patching of the systems under their control – or at least begin testing the …

Will February’s Patch Tuesday fix a known zero-day?

February 10, 2017

Coming into Patch Tuesday we have a known zero day on the Microsoft side, and we’ve seen example code for an SMB exploit that could lead to DoS and BYOD of a system. US …