Malware & Threats Microsoft Warns of Active Zero-Day Exploitation, Patches 60 Windows Vulnerabilities Patch Tuesday: Microsoft documents 60 security flaws in multiple software products and flags an actively exploited Windows zero-day for urgent attention. Ryan NaraineMay 14, 2024
Malware & Threats Adobe Patches Critical Flaws in Reader, Acrobat Adobe documents multiple code execution flaws in a wide range of products, including the widely deployed Adobe Acrobat and Reader software. Ryan NaraineMay 14, 2024
Malware & Threats Apple Patch Day: Code Execution Flaws in iPhones, iPads, macOS Apple documents another zero-day flaw being exploited on older iPhones and documents security problems in macOS, iOS and iPadOS. Ryan NaraineMay 13, 2024
Application Security Adobe Adds Content Credentials and Firefly to Bug Bounty Program Adobe is providing incentives for bug bounty hackers to report security flaws in its implementation of Content Credentials and Adobe Firefly. Ionut ArghireMay 1, 2024
Cloud Security Microsoft Plugs Gaping Hole in Azure Kubernetes Service Confidential Containers Patch Tuesday: Microsoft warns that unauthenticated hackers can take complete control of Azure Kubernetes clusters. Ryan NaraineApril 9, 2024
Malware & Threats Patch Tuesday: Code Execution Flaws in Multiple Adobe Software Products Adobe calls attention to a pair of code execution bugs in Adobe Commerce and Magento Open Source, a product used to manage online stories. Ryan NaraineApril 9, 2024
Security Architecture Patch Tuesday: Microsoft Flags Major Bugs in HyperV, Exchange Server Microsoft ships patches for at least 60 security vulnerabilities in the Windows ecosystem and warned of remote code execution risks. Ryan NaraineMarch 12, 2024
Application Security SAP Patches Critical Command Injection Vulnerabilities Enterprise software maker SAP documents multiple critical-severity issues and warns of risk of command injection attacks. Ionut ArghireMarch 12, 2024
Risk Management Adobe Patches Critical Flaws in Enterprise Products Patch Tuesday: Adobe ships a hefty batch of security updates to fix critical-severity vulnerabilities in multiple enterprise-facing products. Ryan NaraineMarch 12, 2024
Endpoint Security Chipmaker Patch Tuesday: AMD and Intel Patch Over 100 Vulnerabilities AMD and Intel patch dozens of vulnerabilities on February 2024 Patch Tuesday, including multiple high-severity bugs. Ionut ArghireFebruary 14, 2024
Malware & Threats Microsoft Confirms Windows Exploits Bypassing Security Features Patch Tuesday: Microsoft pushes a massive batch of security-themed updates and calls urgent attention to exploits bypassing security features. Ryan NaraineFebruary 13, 2024
Vulnerabilities Intel, AMD, Zoom, Splunk Release Patch Tuesday Security Advisories Intel, AMD, Zoom and Splunk released security advisories on Patch Tuesday to inform customers about vulnerabilities found in their products. Eduard KovacsJanuary 11, 2024
Network Security Microsoft Ships Urgent Fixes for Critical Flaws in Windows Kerberos, Hyper-V Patch Tuesday: Redmond patches critical, remote code execution vulnerabilities haunting Windows Kerberos and Windows Hyper-V. Ryan NaraineJanuary 9, 2024
Malware & Threats Adobe Patches Code Execution Flaws in Substance 3D Stager Patch Tuesday: Adobe patches six security flaws in the Substance 3D Stager product and warned of code execution risks on Windows and macOS. Ryan NaraineJanuary 9, 2024
Phishing Microsoft Patch Tuesday: Critical Spoofing and Remote Code Execution Flaws Microsoft warns of critical spoofing and remote code execution bugs in the Windows MSHTML Platform and Microsoft Power Platform Connector. Ryan NaraineDecember 12, 2023
Application Security Adobe Patches 207 Security Bugs in Mega Patch Tuesday Bundle Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues. Ryan NaraineDecember 12, 2023
Cloud Security Critical Authentication Bypass Flaw in VMware Cloud Director Appliance VMware flaw carries a CVSS severity-score of 9.8/10 and can be exploited to bypass login restrictions when authenticating on certain ports. Ryan NaraineNovember 14, 2023
Incident Response Microsoft Warns of Critical Bugs Being Exploited in the Wild Patch Tuesday: Redmond’s security response team flags two vulnerabilities -- CVE-2023-36033 and CVE-2023-36036 -- already being exploited in the wild. Ryan NaraineNovember 14, 2023
Application Security Adobe Patch Tuesday: Critical Bugs in Acrobat, Reader, ColdFusion Adobe patches 72 security bugs and calls special attention to code-execution defects in the widely deployed Acrobat and Reader software. Ryan NaraineNovember 14, 2023
Application Security Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business Microsoft patches more than 100 vulnerabilities across the Windows ecosystem and warns that three are already being exploited in the wild. Ryan NaraineOctober 10, 2023