State |
Forum | Posts |
Latest Post |
|
Public-facing Kubernetes clusters at risk of takeover thanks to Ingress-Nginx flaw
| 1 |
|
|
Infoseccers criticize Veeam over critical RCE vulnerability and a failing blacklist
| 7 |
|
|
IBM scores perfect 10 ... vulnerability in mission-critical OS AIX
| 5 |
|
|
Choose your own Patch Tuesday adventure: Start with six zero-day fixes, or six critical flaws
| 23 |
|
|
FreSSH bugs undiscovered for years threaten OpenSSH security
| 16 |
|
|
Google: How to make any AMD Zen CPU always generate 4 as a random number
| 75 |
|
|
Google patches odd Android kernel security bug amid signs of targeted exploitation
| 5 |
|
|
Apple plugs security hole in its iThings that's already been exploited in iOS
| 15 |
|
|
Don't want your Kubernetes Windows nodes hijacked? Patch this hole now
| 4 |
|
|
One of Salt Typhoon's favorite flaws still wide open on 91% of at-risk Exchange Servers
| 4 |
|
|
SonicWall flags critical bug likely exploited as zero-day, rolls out hotfix
| 10 |
|
|
Asus lets processor security fix slip out early, AMD confirms patch in progress
| 11 |
|
|
Microsoft issues out-of-band fix for Windows Server 2022 NUMA glitch
| 6 |
|
|
Patch procrastination leaves 50,000 Fortinet firewalls vulnerable to zero-day
| 3 |
|
|
Six vulnerabilities in ubiquitous rsync tool announced and fixed in a day
| 21 |
|
|
Windows Patch Tuesday hits snag with Citrix software, workarounds published
| 8 |
|
|
Microsoft fixes under-attack privilege-escalation holes in Hyper-V
| 7 |
|
|
Cryptojacking, backdoors abound as fiends abuse Aviatrix Controller bug
| 1 |
|
|
Zero-day exploits plague Ivanti Connect Secure appliances for second year running
| 2 |
|
|
Critical security hole in Apache Struts under exploit
| 3 |
|
|
Three more vulns spotted in Ivanti CSA, all critical, one 10/10
| 2 |
|
|
Micropatchers share 1-instruction fix for NTLM hash leak flaw in Windows 7+
| 11 |
|
|
Perfect 10 directory traversal vuln hits SailPoint's IAM solution
| 6 |
|
|
Zabbix urges upgrades after critical SQL injection bug disclosure
| 7 |
|
|
QNAP and Veritas dump 30-plus vulns over the weekend
| 2 |
|
|
Palo Alto Networks tackles firewall-busting zero-days with critical patches
| 4 |
|
|
Microsoft slips Task Manager and processor count fixes into Patch Tuesday
| 7 |
|
|
Admins can give thanks this November for dollops of Microsoft patches
| 21 |
|
|
Cisco scores a perfect CVSS 10 with critical flaw in its wireless system
| 16 |
|
|
VMware fixes critical RCE, make-me-root bugs in vCenter - for the second time
| 2 |
|
|
Patch now: Critical Nvidia bug allows container escape, complete host takeover
| 18 |
|
|
HPE patches three critical security holes in Aruba PAPI
| 1 |
|
|
Ivanti patches exploited admin command execution flaw
| 8 |
|
|
WhatsApp still working on making View Once chats actually disappear for all
| 16 |
|
|
Adobe fixed Acrobat bug, neglected to mention whole zero-day exploit thing
| 4 |
|
|
About that Windows Installer 'make me admin' security hole. Here's how it's exploited
| 23 |
|
|
Microsoft says it broke some Windows 10 patching – as it fixes flaws under attack
| 24 |
|
|
To patch this server, we need to get someone drunk
| 116 |
|
|
From Copilot to Copirate: How data thieves could hijack Microsoft's chatbot
| 7 |
|
|
Microsoft patches scary wormable hijack-my-box-via-IPv6 security bug and others
| 24 |
|
|
AMD won’t patch Sinkclose security bug on older Zen CPUs
| 14 |
|
|
Using 1Password on Mac? Patch up if you don’t want your Vaults raided
| 23 |
|
|
Google splats device-hijacking exploited-in-the-wild Android kernel bug among others
| 8 |
|
|
Ransomware gangs are loving this dumb but deadly make-me-admin ESXi vulnerability
| 18 |
|
|
CrowdStrike meets Murphy's Law: Anything that can go wrong will
| 98 |
|
|
Progress discloses second critical flaw in Telerik Report Server in as many months
| 1 |
|
|
Windows Patch Tuesday update might send a user to the BitLocker recovery screen
| 44 |
|
|
Maximum-severity Cisco vulnerability allows attackers to change admin passwords
| 17 |
|
|
Firms skip security reviews of major app updates about half the time
| 18 |
|
|
ZDI shames Microsoft for – yet another – coordinated vulnerability disclosure snafu
| 11 |
|