Pro VMware patches virtual machine escape issue on Windows The updates also address denial-of-service issues in multiple products 12 Jun
Pro SAP patches log-in flaw in ASE database Combined with other flaws, complete access to a database could be gained 27 Apr
Pro Black Duck to hunt down insecure open source code Black Duck Hub integrates with other tools to audit enterprise use of open source code for known vulnerabilities 9 Apr
Pro Vulnerable Dell support tool now detected as risky software Older versions of Dell System Detect contain a serious vulnerability that allows hackers to install malware on users' computers 7 Apr
Pro Cisco patches autonomic networking in IOS routers, switches Flaws could allow attackers to gain limited access over affected devices or to disrupt their normal operation 26 Mar
Pro Researchers hack computers using DRAM electrical leaks 'Rowhammering' attack exploits electrical interference to change binary values in memory 13 Mar
Pro Apple and Linux most vulnerable OS of 2014 Windows did not feature in top 3, but IE issues remain high 24 Feb
Pro Google eases bug disclosure practices Post Microsoft bug revelations, Google offers additional grace period before going public 16 Feb
Pro Oracle tackles host of vulnerabilities, including E-Business Suite flaw E-Business Suite vulnerability could give attackers complete control over databases storing sensitive information 21 Jan
Blogs A bug too far? Is there a value to bug disclosure while resolution efforts are underway? 16 Jan
Pro Google publishes third Windows 0-day vulnerability in a month Sticking by 90-day disclosure deadline, despite criticism from Microsoft 16 Jan
Pro Google discloses another unpatched Windows flaw, to Microsoft’s chagrin Microsoft unhappy that Google didn't want to wait another two days before publicly releasing details of vulnerability 13 Jan
Pro OpenSSL patches eight new vulnerabilities Flaws of moderate and low severity found but server admins warned to update 12 Jan
Pro Internet Explorer caused 2014 surge in Microsoft flaws Despite improvement in Windows, IE vulnerabilities remain a major issue, according to ESET 9 Jan
Pro Flaws could allow malicious firmware reflash US CERT has warned of three issues that could affect critical firmware 6 Jan
Pro Google discloses unpatched Windows vulnerability Microsoft didn't fix the bug within a 90-day deadline Google imposed 5 Jan
Pro Critical vulnerability in Git clients puts developers at risk Repositories can execute rogue commands 2 Jan
Pro ‘Grinch’ not a Linux vulnerability Red Hat says the way Linux handles user permissions could still lead to potential misuse 19 Dec
Life Web server vulnerability exposes routers to hacking Potentially millions of devices affected, reports Check Point 19 Dec
Pro Forgotten subdomains increase account hijack risk Subdomains pointed at old domains that have long expired and can be registered by attackers, finds security company 9 Dec
Pro POODLE flaw returns, hitting TLS security protocol HTTPS web site owners advised to check their web sites again 9 Dec
Pro IBM fixes serious flaw in Endpoint Manager for MDM Flaw can be exploited to execute arbitrary code on the management server 5 Dec
Pro Siemens patches critical SCADA flaws Vulnerabilities allow remote attackers to extract files from WinCC SCADA servers and execute arbitrary code on them 28 Nov
Pro Unicorn Internet Explorer bug exploitation spotted ESET identifies exploitation in the wold, warns users to patch flaw 21 Nov
Pro Microsoft emergency patch aims to foil Windows Server attacks “Out-of-band" security update to patch a vulnerability in all versions of Windows Server software 19 Nov
Pro Cisco patches serious vulnerabilities in RV Series routers Flaws allow attackers to execute commands, overwrite files and launch CSRF attacks 7 Nov
Pro Drupal site owners warned of likelihood of hacking Those who failed to rapidly deploy a recent critical patch have been advised to restore sites from back-ups 31 Oct
Pro Microsoft warns of Windows zero-day vulnerability Users warned that cybercriminals are exploiting a zero-day flaw using malicious PowerPoint documents sent as email attachments 22 Oct
Pro Drupal releases patch for severe SQL injection flaw Flaw could allow an anonymous attacker to execute arbitrary PHP code 17 Oct
Pro VMware and Cisco patch vulnerabilities in DC gear and software Cisco fixed a vulnerability in server baseband management controllers and VMware in network virtualisation products 15 Sep
Pro Heartbleed exposes hardware design weaknesses Issue highlights weaknesses in memory and cache architecture 18 Aug
Pro Zero-day flaws discovered in Symantec’s Endpoint Protection Flaws could be used to gain full system access, says Offensive Security 30 Jul
Pro Attackers exploiting Elasticsearch bug on Amazon cloud Amazon EC2 instances targeted to deploy DDoS bots 29 Jul
Pro Active Directory critical flaw could allow password change Microsoft contends the general issue has been long-known, but Israel-based Aorato has developed a working attack 15 Jul
Pro SSH backdoor gives access to Cisco comms manager Cisco released new software versions to fix the issue and patch another serious vulnerability 4 Jul
Pro iOS and Android each shown to be vulnerable New Marble Security report says Apple has an edge in a couple of areas, but enterprises warned there are still ways into its walled garden 18 Jun
Pro Many servers expose insecure out-of-band management interfaces to the Internet Design and implementation flaws in the Intelligent Platform Management Interface puts many servers at risk, security researcher says 9 Jun
Pro New OpenSSL vulnerability puts encrypted comms at risk of spying Flaw allows man-in-the-middle attackers to decrypt traffic between clients and servers that use OpenSSL 6 Jun
Subscribers 0
Fans 0
Followers 0
Followers