Hot Topics

Time to Patch

Patch Tuesday, October 2023 Edition

Patch Tuesday, October 2023 Edition

| | Adam Barnett, amazon, Apple, CloudFlare, CVE-2023-35349, CVE-2023-36563, CVE-2023-36778, CVE-2023-41763, CVE-2023-44487, Damian Menscher, google, Immersive Labs, iOS 17.0.3, iPadOS 17.0.3, libvpx, Microsoft, Natalie Silva, Patch Tuesday October 2023, Rapid Reset Attack, rapid7, Security Tools, Skype for Business, Time to Patch, Windows, Wordpad
Microsoft today issued security updates for more than 100 newly-discovered vulnerabilities in its Windows operating system and related software, including four flaws that are already being exploited. In addition, Apple recently released ...
Krebs on Security
Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

Adobe, Apple, Google & Microsoft Patch 0-Day Bugs

| | adobe, Apple, Automox, CVE-2023-26369, CVE-2023-36761, CVE-2023-36802, CVE-2023-38148, CVE-2023-41064, google, iOS 16.16.1, Lockdown Mode, Microsoft, Microsoft Patch Tuesday September 2023, Microsoft Word, Time to Patch, Tom Bowyer
Microsoft today issued software updates to fix at least five dozen security holes in Windows and supported software, including patches for two zero-day vulnerabilities that are already being exploited. Also, Adobe, Google ...
Krebs on Security
Microsoft Patch Tuesday, August 2023 Edition

Microsoft Patch Tuesday, August 2023 Edition

| | adobe, CVE-2023-21709, CVE-2023-36884, CVE-2023-36910, CVE-2023-38180, Immersive Labs, Microsoft, Microsoft Patch Tuesday August 2023, Nikolas Cemerikic, Satnam Narang, Security Tools, Tenable, Time to Patch
Microsoft Corp. today issued software updates to plug more than 70 security holes in its Windows operating systems and related products, including a patch that addresses multiple zero-day vulnerabilities currently being exploited ...
Krebs on Security
Apple & Microsoft Patch Tuesday, July 2023 Edition

Apple & Microsoft Patch Tuesday, July 2023 Edition

| | Adam Barnett, Andrew Brandt, Apple zero-day, cisco, CVE-2023-32046, CVE-2023-32049, CVE-2023-35311, CVE-2023-36884, Immersive Labs, iOS 16.5.1, Kevin Breen, macOS 13.4.1, Patch Tuesday July 2023, rapid7, Safari 16.5.2, Security Tools, sophos, Storm-0978, Time to Patch, Trend Micro
Microsoft Corp. today released software updates to quash 130 security bugs in its Windows operating systems and related software, including at least five flaws that are already seeing active exploitation. Meanwhile, Apple ...
Krebs on Security
CISA Order Highlights Persistent Risk at Network Edge

CISA Order Highlights Persistent Risk at Network Edge

| | Adam Boileau, Barracuda Networks, cisa, CVE-2023-27997, Cybersecurity and Infrastructure Security Agency, Fortinet, Fortra, GoAnywhere, Latest Warnings, Mandiant, MOVEit Transfer, Patrick Gray, Progress Software, risky-business-podcast, The Coming Storm, Time to Patch
The U.S. government agency in charge of improving the nation's cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes ...
Krebs on Security
Microsoft Patch Tuesday, June 2023 Edition

Microsoft Patch Tuesday, June 2023 Edition

| | Action1, CVE-2023-28310, CVE-2023-29357, CVE-2023-29363, CVE-2023-32014, CVE-2023-32015, CVE-2023-32031, Immersive Labs, Kevin Breen, Microsoft Patch Tuesday June 2023, Security Tools, Time to Patch
Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This month's relatively light patch load has another added bonus for system ...
Krebs on Security
Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

| | Barracuda Networks, Caitlin Condon, CVE-2023-2868, Email Security Gateway, International Computer Science Institute, Latest Warnings, Mandiant, Nicholas Weaver, rapid7, Time to Patch
It's not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying ...
Krebs on Security
Microsoft Patch Tuesday, May 2023 Edition

Microsoft Patch Tuesday, May 2023 Edition

| | Adam Barnett, BlackLotus, CVE-2023-24932, CVE-2023-24941, CVE-2023-28283, CVE-2023-29325, CVE-2023-29336, Immersive Labs, Kevin Breen, rapid7, SANS Internet Storm Center, Time to Patch
Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited ...
Krebs on Security
Many Public Salesforce Sites are Leaking Private Data

Many Public Salesforce Sites are Leaking Private Data

| | A Little Sunshine, Charan Akiri, DC Health, DC Health Link, Huntington Bank, Latest Warnings, Matthew Jennings, Mike Rupert, Salesforce Community websites, Scott Carbee, TCF Bank, The Coming Storm, Time to Patch, Vermont
A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem ...
Krebs on Security
Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

| | Bharat Jogi, CVE-2022-37969, CVE-2023-28219, CVE-2023-28220, CVE-2023-28252, DBAPPSecurity, Dustin Childs, iOS 15.5.7, iOS/iPadOS 16.4.1, Mandiant, Nokoyawa ransomware, Qualys, Security Tools, The Coming Storm, Time to Patch, Trend Micro Zero Day Initiative, Windows Common Log System File System
Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to ...
Krebs on Security
Load more