Advertisement
Top

Tag: fix


Vulnerabilities

SAP Patches Multiple XSS and Missing Authorization Vulnerabilities

January 11, 2017

Via: Security Week

SAP on Tuesday released its first set of monthly security patches for 2017, which addresses numerous Cross-Site Scripting (XSS) and Missing Authorization Check issues across its products. The enterprise software giant included 18 Patch Day Security Notes in the January […]


Vulnerabilities

FTC sets $25,000 prize for automatic IoT patching

January 5, 2017

Via: Infoworld

The U.S. Federal Trade Commission is scheduled to announce Wednesday a “prize competition” for a tool that can used against security vulnerabilities in internet of things systems. The prize pot is up to $25,000, with $3,000 available for each honorable […]


Vulnerabilities

Adobe fixes flaws in Flash Player and Adobe Connect

November 9, 2016

Via: CSO Online

Adobe Systems has released scheduled security patches for its widely used Flash Player software as well as the Adobe Connect web conferencing platform, which is  popular in enterprise environments. The Flash Player security updates fix nine critical vulnerabilities that could […]


Vulnerabilities

GitLab plugs critical flaw in its code repository manager software

November 7, 2016

Via: Help Net Security

GitLab (the company) has pushed out security updates for both the Community Edition (CE) and Enterprise Edition (EE) of the GitLab software, fixing a critical security flaw in the “import/export project” feature. “This feature did not properly check for symbolic […]


Vulnerabilities

Joomla Update Fixes Two Critical Issues, 2FA Error

October 27, 2016

Via: Threat Post

Web developers who run the content management system Joomla! are strongly encouraged to update their sites immediately. The company on Tuesday pushed out the most recent version of the CMS, 3.6.4, fixing two critical issues that can lead to account […]


Mobile security, Vulnerabilities

Apple Patches iOS Flaw Exploitable by Malicious JPEG

October 26, 2016

Via: Threat Post

Apple on Monday patched a code execution vulnerability in iOS that could be exploited via a JPEG file crafted to take advantage of the flaw. Apple also issued its first round of patches for macOS Sierra as part of a […]


Vulnerabilities

Apple to fix backup security vulnerability in iOS 10

September 27, 2016

Via: Computer Weekly

Apple plans to fix a vunerability in iOS 10 discovered by controversial Russian forensics company Elcomsoft that puts iPhones’ security at risk. Apple added an alternative password verification mechanism to iOS 10, inadvertently weakening the security of local backups, the […]


Vulnerabilities

Trihedral Patches Flaws in SCADA Software

June 10, 2016

Via: Security Week

Trihedral Engineering, a Canada-based company that specializes in developing software for SCADA systems, has patched several remotely exploitable vulnerabilities in its VTScada product. VTScada, which allows users to develop industrial monitoring and control software, is deployed in North America and […]


Vulnerabilities

Will we ever fix ‘broken’ USB stick security?

May 23, 2016

Via: We Live Security

In a recent study, researchers from Google and the universities of Illinois and Michigan dropped nearly 300 USB sticks off at the University of Illinois Urbana-Champaign campus and measured how many of these were plugged into student machines. The findings […]


Vulnerabilities

Bitly partners with Let’s Encrypt for HTTPS links

May 19, 2016

Via: Help Net Security

Bitly processes data associated with more than 12 billion clicks per month, leading to massive troves of intelligence. Now, they’re partnering with Let’s Encrypt to generate SSL certificates for more than 40,000 Bitly branded domains used to create links and […]


Vulnerabilities

Flash Player update fixes zero-day vulnerability

May 18, 2016

Via: InfoSecurity Live

Adobe Systems has released a security update for Flash Player in order to fix a publicly known vulnerability, as well as 24 privately reported security flaws. The company issued a warning about the zero-day previously unknown and unpatched . The […]


Vulnerabilities

Slack Plugs Token Security Hole

May 3, 2016

Via: Threat Post

Popular collaboration and communication firm Slack rushed to plugged a security hole in its platform Thursday that was leaking some of its users’ private chats and files for anyone to access. Slack, a leading tool used by companies to communicate […]


Application security, Vulnerabilities

Zen Cart Patches Multiple XSS Vulnerabilities

March 29, 2016

Via: Security Week

Zen Cart on Friday released an updated version of the popular online open source shopping cart application to address multiple Cross-Site Scripting (XSS) vulnerabilities. The security issues were discovered by Trustwave and are said to affect Zen Cart 1.5.4 and […]


Application security

Twitter Patches Bug Exposing Details of 10,000 Users

February 23, 2016

Via: InfoSecurity Live

Twitter has addressed a privacy bug that exposed email addresses and phone numbers associated with roughly 10,000 user accounts. According to the social media company, the flaw affected its password recovery system for approximately 24 hours last week. Users whose […]


Privacy protection, Vulnerabilities

Samsung Launches Security Solution for Smart TVs

January 5, 2016

Via: Security Week

Computers and mobile devices might be the main targets for cybercriminals at the moment, but the fast expanding Internet of Things (IoT) market is creating new opportunities for attacks, and Samsung appears determined to prevent that. Last week, the company […]


Application security

Microsoft acknowledges Office 2016-El Capitan crashes but lacks ETA for fix

October 4, 2015

Via: application-security

#microsoft has acknowledged that users of its Office for Mac 2016 application suite are encountering frequent crashes and implied that it’s working on a #fix, but offered no timeline for delivering an update. In an emailed #statement, a Microsoft spokeswoman […]