security update

Atlassian reveals critical Confluence RCE flaw, urges “immediate action” (CVE-2023-22527)

January 16, 2024

Atlassian has patched a critical vulnerability (CVE-2023-22527) in Confluence Data Center and Confluence Server that could lead to remote code execution. The good news is that …

Juniper fixes critical RCE in its SRX firewalls and EX switches (CVE-2024-21591)

January 15, 2024

Juniper Networks has fixed a critical pre-authentication remote code execution (RCE) vulnerability (CVE-2024-21591) in Junos OS on SRX firewalls and EX switches. About …

Critical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)

January 12, 2024

A critical vulnerability in GitLab CE/EE (CVE-2023-7028) can be easily exploited by attackers to reset GitLab user account passwords. While also vulnerable, users who have …

Critical Cisco Unity Connection flaw gives attackers root privileges. Patch now! (CVE-2024-20272)

January 11, 2024

Cisco has fixed a critical vulnerability (CVE-2024-20272) in Cisco Unity Connection that could allow an unauthenticated attacker to upload arbitrary files and gain root …

Microsoft fixes critical flaws in Windows Kerberos, Hyper-V (CVE-2024-20674, CVE-2024-20700)

January 9, 2024

For January 2024 Patch Tuesday, Microsoft has released fixes for 49 CVE-numbered vulnerabilities, two of which are critical: CVE-2024-20674 and CVE-2024-20700. None of the …

SQLi vulnerability in Cacti could lead to RCE (CVE-2023-51448)

January 9, 2024

A blind SQL injection vulnerability (CVE-2023-51448) in Cacti, a widely-used network monitoring, performance and fault management framework, could lead to information …

December 2023 Patch Tuesday: 33 fixes to wind the year down

December 12, 2023

Microsoft’s December 2023 Patch Tuesday is a light one: 33 patches, only four of which are deemed critical. “This month, Microsoft did not patch any zero-day …

New RCE vulnerability in Apache Struts 2 fixed, upgrade ASAP (CVE-2023-50164)

December 8, 2023

The Apache Struts project has released updates for the popular open-source web application framework, with fixes for a critical vulnerability that could lead to remote code …

Atlassian fixes four critical RCE vulnerabilities, patch quickly!

December 6, 2023

Atlassian has released security updates for four critical vulnerabilities (CVE-2023-1471, CVE-2023-22522, CVE-2023-22524, CVE-2023-22523) in its various offerings that could …

Microsoft will offer extended security updates for Windows 10

December 6, 2023

Microsoft will not abandon Windows 10 users to an insecure fate once it reaches end of support (EOS) on October 14, 2025: both enterprises and individual consumers will be …

Qlik Sense flaws exploited in Cactus ransomware campaign

December 1, 2023

Attackers are exploiting three critical vulnerabilities in internet-facing Qlik Sense instances to deliver Cactus ransomware to target organizations, Arctic Wolf researchers …

Critical Zyxel NAS vulnerabilities patched, update quickly!