Patches

Threatpost 

Apple Patches Intel Side-Channel Bugs; Updates iOS, macOS and More

May 14, 2019 TH Author Apple, Apple TV, Apple Watch, Intel, ios, macOS, may 2019, Microarchitectural Data Sampling, Patches, side-channel, updates, Vulnerabilities, zombieload

A massive update addresses the breadth of the computing giant’s product portfolio. READ MORE HERE…

Read more

Threatpost 

High-Severity Bug Leaves Cisco TelePresence Gear Open to Attack

May 6, 2019 TH Author Cisco, Denial of Service, high severity bugs, Patches, software vulnerabilities, telepresence, Vulnerabilities

Cisco patches two high-severity bugs that could be exploited by remote attackers. READ MORE HERE…

Read more

Threatpost 

Authentication Bypass Bug Hits Top Enterprise VPNs

April 15, 2019 TH Author authentication bypass, Cisco, cookie storage, Encryption, f5, Palo Alto, Patches, pulse secure, VPNs, Vulnerabilities, Vulnerability, Web Security

Business users of Cisco, F5 Networks, Palo Alto Networks and Pulse Secure platforms are impacted, according the U.S. government. READ MORE HERE…

Read more

Threatpost 

Magento Patches Critical SQL Injection and RCE Vulnerabilities

March 29, 2019 TH Author Cloud Security, CSRF, e-commerce engine, Magento, Magento Commerce, Magento Core, Magento Open Source, Patches, remote code execution vulnerability, site takeover, SQL Injection, Vulnerabilities, XSS

Magento patched 37 flaws Thursday, including a stored cross-site scripting (XSS) vulnerability that could have let an attacker take over a site. READ MORE HERE…

Read more

Threatpost 

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

March 25, 2019 TH Author conferencing, Eavesdropping, grandstream, ip pbx, IP phones, Malware, Patches, SMB, TrustWave, Vulnerabilities, Web Security

Attackers can remotely compromise multiple network devices (IP PBX, conferencing gear and IP phones), installing malware and eavesdropping via video and audio functions. READ MORE HERE…

Read more

Threatpost 

RSA Conference 2019 Recap

March 8, 2019 TH Author Patches, Podcasts, Privacy, RSA, rsa conference 2019, RSAC, Security

From privacy to patches, Threatpost editors discuss the biggest infosec news and trends that they saw this week at RSA Conference 2019. READ MORE HERE…

Read more

Threatpost 

Active Scans Target Vulnerable Cisco Routers for Remote Code-Execution

January 28, 2019 TH Author Cisco, CVE-2019-1652, CVE-2019-1653, information disclosure, Patches, remote code execution, RV320, RV325, small business routers, Vulnerabilities, Web Security

Cyberattackers are targeting a pair of just-patched vulnerabilities that allow remote unauthenticated information disclosure leading to remote code-execution. READ MORE HERE…

Read more

Threatpost 

Kubernetes Flaw is a “Huge Deal,” Lays Open Cloud Deployments

December 5, 2018 TH Author api server, cloud deployments, Cloud Security, Containers, critical flaw, CVE-2018-1002105, Kubernetes, Linux, Patches, Vulnerabilities, Vulnerability

Hackers can steal data, sabotage cloud deployments and more. READ MORE HERE…

Read more

Threatpost 

Black Hat 2018: Widespread Critical Flaws Found in Smart-City Gear

August 9, 2018 TH Author battelle, Black Hat, Black Hat 2018, Critical Infrastructure, critical vulnerabilities, eschelon, IBM X-Force, libelium, Patches, smart city flaws, Vulnerabilities

More than a dozen flaws in smart-city gear could open the door to attackers bent on sowing public panic, according to IBM X-Force. READ MORE HERE…

Read more

Threatpost 

Spectre Will Haunt Us For a Long Time

July 23, 2018 TH Author chipmakers, Critical Infrastructure, infosec insider, Intel, long term effects, Meltdown, Mobile Security, os, Patches, performance, Spectre, virsec, Vulnerabilities, Web Security

These vulnerabilities have existed for over 20 years, and we are not even close to closing the door on these significant risks. READ MORE HERE…

Read more