Bleeping Computer

APRIL 23, 2024

Microsoft reversed the fix for an Outlook bug causing erroneous security warnings after installing December 2023 security updates [.]

121

121

Bleeping Computer

MARCH 22, 2024

Microsoft has released emergency out-of-band (OOB) updates to fix a known issue causing Windows domain controllers to crash after installing the March 2024 Windows Server security updates. [.]

136

136

Bleeping Computer

APRIL 9, 2024

Microsoft has fixed two actively exploited zero-day vulnerabilities during the April 2024 Patch Tuesday, although the company failed to initially tag them as such. [.]

Malware 130

Malware 130

Security Boulevard

MARCH 18, 2024

BigFix is a cybersecurity tool that offers endpoint management and security compliance solutions to identify, manage, and fix vulnerabilities across various devices. The post Big Fix appeared first on VERITI. The post Big Fix appeared first on Security Boulevard.

Cybersecurity 61

Cybersecurity 61

Bleeping Computer

APRIL 5, 2024

Microsoft has fixed a known issue causing 0x80073cf2 errors when using the System Preparation (Sysprep) tool after installing November Windows 10 updates. [.]

113

113

Bleeping Computer

MARCH 27, 2024

Google fixed seven security vulnerabilities in the Chrome web browser on Tuesday, including two zero-days exploited during the Pwn2Own Vancouver 2024 hacking competition. [.]

Hacking 126

Hacking 126

Bleeping Computer

MARCH 22, 2024

Mozilla has released security updates to fix two zero-day vulnerabilities in the Firefox web browser exploited during the Pwn2Own Vancouver 2024 hacking competition. [.]

Hacking 136

Hacking 136

Pen Test Partners

FEBRUARY 20, 2024

Unfortunately, VMware have decided not to fix the issue as they deem the enhanced authentication plugin as no longer supported, even though the vSphere 7 product line that uses the plugin remains supported until April 2025. It’s also frustrating that VMware took 126 days to essentially publish a no fix disclosure. Extension provided.

Authentication 135

Authentication Risk 135

Security Affairs

APRIL 11, 2024

Palo Alto Networks fixed several vulnerabilities in its PAN-OS operating system, including 3 issues that can trigger a DoS condition on its firewalls. Palo Alto Networks also fixed an improper Group Membership Change vulnerability in Cloud Identity Engine (CIE). ” reads the advisory.

Firewall 125

Firewall Software Engineering Authentication 125

Security Boulevard

APRIL 23, 2024

Reading Time: 5 min Struggling to fix your Outlook email errors? The post How to Fix Outlook Email Errors? This guide tackles common Outlook errors like sending issues, attachment problems, and connection errors. appeared first on Security Boulevard.

Cybersecurity 57

Cybersecurity 57

Bleeping Computer

APRIL 12, 2024

Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts. [.]

113

113

Security Boulevard

APRIL 4, 2024

In this article, we’ll explore the specifics […] The post Multiple Puma Vulnerabilities Fixed in Ubuntu appeared first on TuxCare. The post Multiple Puma Vulnerabilities Fixed in Ubuntu appeared first on Security Boulevard. Recently, the Ubuntu security team released updates to address Puma vulnerabilities in Ubuntu 22.04

61

61

Bleeping Computer

APRIL 3, 2024

IT security software company Ivanti has released patches to fix multiple security vulnerabilities impacting its Connect Secure and Policy Secure gateways. [.]

VPN 106

VPN Software 106

Security Affairs

APRIL 10, 2024

Fortinet fixed a dozen vulnerabilities in multiple products, including a critical-severity remote code execution (RCE) issue, tracked as CVE-2023-45590 (CVSS score of 9.4), in FortiClientLinux. Below are the impacted versions and the one released by the company to fix the issue. ” reads the advisory published by Fortinet.

Cyber threats 127

Cyber threats Hacking Information Security 127

Bleeping Computer

APRIL 12, 2024

Telegram fixed a zero-day vulnerability in its Windows desktop application that could be used to bypass security warnings and automatically launch Python scripts. [.]

106

106

Security Affairs

FEBRUARY 8, 2024

CISCO fixed two critical flaws in Expressway Series collaboration gateways exposing vulnerable devices to cross-site request forgery (CSRF) attacks. The company urges customers to upgrade to an appropriate fixed software release : Cisco Expressway Series Release First Fixed Release Earlier than 14.0 Migrate to a fixed release.

Accountability 116

Accountability Software Hacking 116

Security Boulevard

APRIL 5, 2024

The post FCC: Phone Network Bugs Must Be Fixed — But are SS7/Diameter Beyond Repair? Fast enough for government work: The Federal Communications Commission is finally minded to do something about decades-old vulnerabilities. appeared first on Security Boulevard.

Government 127

Government Digital transformation Social Engineering Telecommunications 127

Security Boulevard

APRIL 26, 2024

Reading Time: 8 min Fixing SPF Permerror: Resolving authentication hiccups to enhance email deliverability and limiting too many DNS lookups The post Fix SPF Permerror: Overcome SPF Too Many DNS Lookups Limit appeared first on Security Boulevard.

DNS 61

DNS Authentication Cybersecurity 61

Bleeping Computer

APRIL 3, 2024

Google has fixed another zero-day vulnerability in the Chrome browser, which was exploited by security researchers during the Pwn2Own hacking contest last month. [.]

Hacking 105

Hacking 105

InfoWorld on Security

APRIL 12, 2024

The Rust language team has published a point release of Rust to fix a critical vulnerability to the standard library that could benefit an attacker when using Windows. Rust 1.77.2 , published on April 9, includes a fix for CVE-2024-24576.

75

75

Bleeping Computer

DECEMBER 8, 2023

Google says it identified and fixed a bug causing customer files added to Google Drive after April-May 2023 to disappear. However, the fix isn't working for all affected users. [.]

117

117

Bleeping Computer

MARCH 20, 2024

GitHub introduced a new AI-powered feature capable of speeding up vulnerability fixes while coding. This feature is in public beta and automatically enabled on all private repositories for GitHub Advanced Security (GHAS) customers [.]

Software 119

Software 119

Penetration Testing

APRIL 27, 2024

These updates tackle significant vulnerabilities that could potentially allow unauthorized script execution through... The post Mitel Issues Critical Fixes for XSS Vulnerabilities in MiContact Center Business appeared first on Penetration Testing.

Penetration Testing 68

Penetration Testing 68

Penetration Testing

APRIL 10, 2024

... The post GitLab Races to Fix Critical XSS Flaws – Don’t Delay Your Upgrade appeared first on Penetration Testing. GitLab, the widely used DevOps platform for code collaboration and project management, has released a significant security update.

Penetration Testing 103

Penetration Testing 103

Bleeping Computer

FEBRUARY 13, 2024

Microsoft has released the KB5034765 cumulative update for Windows versions 23H2 and 22H2 to fix several bugs in the OS, including an issue that causes problems with the Start menu. [.]

Software 117

Software 117

Security Boulevard

MARCH 19, 2024

Vulnerabilities Fixed in Ubuntu appeared first on TuxCare. Vulnerabilities Fixed in Ubuntu appeared first on Security Boulevard. To address these risks, the Ubuntu security team swiftly released security updates across multiple Ubuntu releases, including Ubuntu 22.04 LTS, Ubuntu 20.04 […] The post Recent Node.js The post Recent Node.js

Risk 57

Risk 57

Security Affairs

APRIL 3, 2024

Two issues fixed by the IT giant, tracked as CVE-2024-29745 and CVE-2024-29748, are actively exploited in the wild. Google addressed several vulnerabilities in Android and Pixel devices, including two actively exploited flaws. Google addressed 28 vulnerabilities in Android and 25 flaws in Pixel devices. ” reads the advisory.

Spyware 115

Spyware Firmware Hacking Information Security 115

The Hacker News

MARCH 20, 2024

Ivanti has disclosed details of a critical remote code execution flaw impacting Standalone Sentry, urging customers to apply the fixes immediately to stay protected against potential cyber threats. Tracked as CVE-2023-41724, the vulnerability carries a CVSS score of 9.6. "An

Cyber threats 103

Cyber threats 103

Bleeping Computer

FEBRUARY 29, 2024

Microsoft has released the optional KB5034843 Preview cumulative update for Windows 10 22H2 with an updated sharing experience and eight other fixes or changes. [.]

111

111

Security Affairs

JANUARY 22, 2024

This is the first actively exploited zero-day vulnerability fixed by the company this year. The issue has been fixed in iOS 16.7.5 Apple released security updates to address a zero-day vulnerability, tracked as CVE-2024-23222, that impacts iPhones, Macs, and Apple TVs. ” reads the advisory published by the company.

Hacking 123

Hacking Information Security 123

Bleeping Computer

MARCH 12, 2024

Microsoft has released the KB5035845 cumulative update for Windows 10 21H2 and Windows 10 22H2, which includes nine new changes and fixes. [.]

112

112

Bleeping Computer

MARCH 5, 2024

Apple released emergency security updates to fix two iOS zero-day vulnerabilities that were exploited in attacks on iPhones. [.]

Technology 135

Technology 135

Security Affairs

APRIL 17, 2024

The installation will apply a fix for each CVE listed in the table below. . “To address the security vulnerabilities listed below, it is highly recommended to download the Avalanche installer and update to the latest Avalanche 6.4.3. These vulnerabilities affect any older versions of Avalanche. You can download the latest Avalanche 6.4.3

Mobile 115

Mobile Software Hacking Information Security 115

Security Affairs

JANUARY 10, 2024

Cisco’s advisory states that there are no workarounds that address this vulnerability and urges customers to install security patches to fix the bug. The following table reports the fixed software release. Cisco Unity Connection Release First Fixed Release 12.5

Authentication 119

Authentication Hacking Software Information Security 119

Bleeping Computer

JANUARY 16, 2024

Google has released security updates to fix the first Chrome zero-day vulnerability exploited in the wild since the start of the year. [.]

134

134

Bleeping Computer

NOVEMBER 30, 2023

Apple released emergency security updates to fix two zero-day vulnerabilities exploited in attacks and impacting iPhone, iPad, and Mac devices, reaching 20 zero-days patched since the start of the year. [.]

138

138

Security Boulevard

FEBRUARY 27, 2024

In this article, we will explore the details of these vulnerabilities and […] The post Several OpenJDK Vulnerabilities Fixed appeared first on TuxCare. The post Several OpenJDK Vulnerabilities Fixed appeared first on Security Boulevard. The affected versions include 21.0.1, 11.0.21, 8u392, and earlier.

61

61