Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2021-09-24 07:13:20 |
(Déjà vu) Researcher drops three iOS zero-days that Apple refused to fix (lien direct) |
Proof-of-concept exploit code for three iOS zero-day vulnerabilities (and a fourth one patched in July) was published on GitHub after Apple delayed patching and failed to credit the researcher. [...] |
Patching
|
|
|
 |
2021-09-24 07:13:20 |
Exploit code released for three iOS 0-days that Apple failed to patch (lien direct) |
Proof-of-concept exploit code for three iOS zero-day vulnerabilities (and a fourth one patched in July) was published on GitHub after Apple delayed patching and failed to credit the researcher. [...] |
Patching
|
|
|
 |
2021-08-17 09:00:00 |
Fortinet delays patching zero-day allowing remote server takeover (lien direct) |
Fortinet has delayed patching a zero-day command injection vulnerability found in the FortiWeb web application firewall (WAF) until the end of August. [...] |
Vulnerability
Patching
|
|
|
 |
2021-06-10 11:00:00 |
Hackers can exploit bugs in Samsung pre-installed apps to spy on users (lien direct) |
Samsung is working on patching multiple vulnerabilities affecting its mobile devices that could be used for spying or to take full control of the system. [...] |
Patching
|
|
|
 |
2020-12-10 11:00:00 |
Cisco fixes new Jabber for Windows critical code execution bug (lien direct) |
Cisco has addressed a new critical severity remote code execution (RCE) vulnerability affecting several versions of Cisco Jabber for Windows, macOS, and mobile platforms after patching a related security bug in September. [...] |
Vulnerability
Patching
|
|
|
 |
2020-06-10 14:45:00 |
(Déjà vu) Microsoft Office June security updates fix critical RCE bugs (lien direct) |
Microsoft released the June 2020 Office security updates, with a total of 19 security updates and 5 cumulative updates for 7 different products, patching 4 critical bugs that enable attackers remotely execute arbitrary code on unpatched systems. [...] |
Patching
|
|
|
 |
2020-06-02 03:22:00 |
Critical Exim bugs being patched but many servers still at risk (lien direct) |
Patching Exim mail servers is not going fast enough and members of the Russian hacker group Sandworm are actively exploiting three critical vulnerabilities that allow executing remote command or code remotely. [...] |
Patching
|
|
|
 |
2020-04-28 14:04:30 |
Microsoft releases guidance on blocking ransomware attacks (lien direct) |
Microsoft warned today of ongoing human-operated ransomware campaigns targeting healthcare organizations and critical services, and shared tips on how to block new breaches by patching vulnerable internet-facing systems. [...] |
Ransomware
Patching
|
|
|
 |
2020-04-15 11:12:10 |
(Déjà vu) Microsoft Office April security updates fix critical RCE bugs (lien direct) |
Microsoft released the April 2020 Office security updates on April 14, 2020, with a total of 55 security updates and 5 cumulative updates for 7 different products, and patching 5 critical bugs allowing attackers to run scripts as the current user and remotely execute arbitrary code on unpatched systems. [...] |
Patching
|
|
|
 |
2020-03-11 10:54:59 |
Microsoft Releases the March 2020 Security Updates for Office (lien direct) |
Microsoft released the March 2020 Office security updates on March 10, 2020, with a total of 13 security updates and 5 cumulative updates for 6 different products, with 12 of them patching bugs allowing attackers to execute arbitrary code remotely after exploitation. [...] |
Patching
|
|
|
 |
2020-02-12 08:33:53 |
Microsoft Releases February 2020 Office Updates With Security Fixes (lien direct) |
Microsoft released the February 2020 Office security updates on February 11, 2020, with a total of 10 security updates and three cumulative updates for six different products, with three of them patching flaws allowing for remote code execution. [...] |
Patching
|
|
|
 |
2020-01-26 10:31:32 |
Patching the Citrix ADC Bug Doesn\'t Mean You Weren\'t Hacked (lien direct) |
Citrix on Friday released the final patch for the critical vulnerability tracked as CVE-2019-19781 in its affected appliances. Many organizations are still at risk, though, as they continue to run Citrix servers without a fix or the advised [...] |
Vulnerability
Patching
|
|
|
 |
2019-10-08 13:51:55 |
(Déjà vu) Microsoft Releases the October 2019 Security Updates for Office (lien direct) |
Microsoft released the October 2019 Microsoft Office security updates, bundling a total of 14 security updates and four cumulative updates across seven different products, nine of them patching remote code execution flaws. [...] |
Patching
|
|
|
 |
2019-09-10 13:42:05 |
(Déjà vu) Microsoft Releases the September 2019 Security Updates for Office (lien direct) |
Microsoft released the September 2019 Microsoft Office security updates, bundling a total of 19 security updates and five cumulative updates across seven different products, five of them patching remote code execution flaws. [...] |
Patching
|
|
|
 |
2019-06-21 12:34:05 |
BlueKeep Warnings Pay Off, Boost Patching in Enterprise Networks (lien direct) |
The multiple warnings about patching Windows systems against the BlueKeep vulnerability (CVE-2019-0708) have not gone unheeded. Administrators of enterprise networks listened and updated most of the machines affected by the issue. [...] |
Vulnerability
Patching
|
|
|
 |
2018-08-01 16:46:02 |
An Open Letter to Microsoft About Poor Windows 10 Update Experiences (lien direct) |
Susan Bradley, an 18 year Microsoft MVP focused on Windows patching and patch management, has sent an open letter to Microsoft executives Satya Nadella, Carlos Picoto, and Scott Guthrie about the frustration Windows 10 users have when dealing with installing new updates. [...] |
Patching
|
|
|
 |
2018-03-07 18:41:05 |
Technique Discovered That Can Mitigate Memcached DDoS Attacks (lien direct) |
A mitigation mechanism is available for all victims who are under a DDoS attack carried out via Memcached servers. [...] |
Patching
|
|
★★★
|