Patches Archives - ThreatsHub Cybersecurity News

Microsoft Patches A Pair of Zero-Days Under Active Attack

July 9, 2019 TH Author adobe, Cloud Security, Critical flaws, IoT, July Patch Tuesday, Microsoft, Patches, sack panic, under active exploit, Vulnerabilities, Web Security, zero-day

The software giant also addressed 15 critical flaws and advised on the recently disclosed Linux Kernel “SACK Panic” bug. READ MORE HERE…

Threatpost

Authentication Bypass Bug Hits Top Enterprise VPNs

April 15, 2019 TH Author authentication bypass, Cisco, cookie storage, Encryption, f5, Palo Alto, Patches, pulse secure, VPNs, Vulnerabilities, Vulnerability, Web Security

Business users of Cisco, F5 Networks, Palo Alto Networks and Pulse Secure platforms are impacted, according the U.S. government. READ MORE HERE…

Threatpost

Magento Patches Critical SQL Injection and RCE Vulnerabilities

March 29, 2019 TH Author Cloud Security, CSRF, e-commerce engine, Magento, Magento Commerce, Magento Core, Magento Open Source, Patches, remote code execution vulnerability, site takeover, SQL Injection, Vulnerabilities, XSS

Magento patched 37 flaws Thursday, including a stored cross-site scripting (XSS) vulnerability that could have let an attacker take over a site. READ MORE HERE…

Threatpost

Bugs in Grandstream Gear Lay Open SMBs to Range of Attacks

March 25, 2019 TH Author conferencing, Eavesdropping, grandstream, ip pbx, IP phones, Malware, Patches, SMB, TrustWave, Vulnerabilities, Web Security

Attackers can remotely compromise multiple network devices (IP PBX, conferencing gear and IP phones), installing malware and eavesdropping via video and audio functions. READ MORE HERE…

Threatpost

RSA Conference 2019 Recap

March 8, 2019 TH Author Patches, Podcasts, Privacy, RSA, rsa conference 2019, RSAC, Security

From privacy to patches, Threatpost editors discuss the biggest infosec news and trends that they saw this week at RSA Conference 2019. READ MORE HERE…

Threatpost

Active Scans Target Vulnerable Cisco Routers for Remote Code-Execution

January 28, 2019 TH Author Cisco, CVE-2019-1652, CVE-2019-1653, information disclosure, Patches, remote code execution, RV320, RV325, small business routers, Vulnerabilities, Web Security

Cyberattackers are targeting a pair of just-patched vulnerabilities that allow remote unauthenticated information disclosure leading to remote code-execution. READ MORE HERE…

Threatpost

Kubernetes Flaw is a “Huge Deal,” Lays Open Cloud Deployments

December 5, 2018 TH Author api server, cloud deployments, Cloud Security, Containers, critical flaw, CVE-2018-1002105, Kubernetes, Linux, Patches, Vulnerabilities, Vulnerability

Hackers can steal data, sabotage cloud deployments and more. READ MORE HERE…

Threatpost

Black Hat 2018: Widespread Critical Flaws Found in Smart-City Gear

August 9, 2018 TH Author battelle, Black Hat, Black Hat 2018, Critical Infrastructure, critical vulnerabilities, eschelon, IBM X-Force, libelium, Patches, smart city flaws, Vulnerabilities

More than a dozen flaws in smart-city gear could open the door to attackers bent on sowing public panic, according to IBM X-Force. READ MORE HERE…

Threatpost

Spectre Will Haunt Us For a Long Time

July 23, 2018 TH Author chipmakers, Critical Infrastructure, infosec insider, Intel, long term effects, Meltdown, Mobile Security, os, Patches, performance, Spectre, virsec, Vulnerabilities, Web Security

These vulnerabilities have existed for over 20 years, and we are not even close to closing the door on these significant risks. READ MORE HERE…

Threatpost

Critical Authentication Flaws in Cisco Policy Suite Patched

July 19, 2018 TH Author Cisco, critical vulnerabilities, Patches, policy suite, SD-WAN, Vulnerabilities, Wireless carriers

Cisco also pushed out seven high-severity fixes for its SD-WAN solution for business users, and a patch for a DoS flaw in the Cisco Nexus 9000 Series Fabric Switches. READ MORE HERE…

← Previous