Tag: Patch

Source URL: https://www.theregister.com/2024/10/09/trinity_ransomware_targets_healthcare_orgs/ Source: The Register Title: Ransomware gang Trinity joins pile of scumbags targeting healthcare Feedly Summary: As if hospitals and clinics didn’t have enough to worry about At least one US healthcare provider has been infected by Trinity, an emerging cybercrime gang with eponymous ransomware that uses double extortion and other “sophisticated" tactics…

The Register: Microsoft issues 117 patches – some for flaws already under attack

—

by

Source URL: https://www.theregister.com/2024/10/08/patch_tuesday_october_2024/ Source: The Register Title: Microsoft issues 117 patches – some for flaws already under attack Feedly Summary: Plus: SAP re-patches a failed patch for critical-rated flaw Patch Tuesday It’s the second Tuesday of the month, which means Patch Tuesday, bringing with it fixes for numerous flaws, bugs and vulnerabilities in major software.…

Krebs on Security: Patch Tuesday, October 2024 Edition

—

by

Source URL: https://krebsonsecurity.com/2024/10/patch-tuesday-october-2024-edition/ Source: Krebs on Security Title: Patch Tuesday, October 2024 Edition Feedly Summary: Microsoft today released security updates to fix at least 117 security holes in Windows computers and other software, including two vulnerabilities that are already seeing active attacks. Also, Adobe plugged 52 security holes across a range of products, and Apple…

The Register: Qualcomm urges device makers to push patches after ‘targeted’ exploitation

—

by

Source URL: https://www.theregister.com/2024/10/08/qualcomm_patch_spyware/ Source: The Register Title: Qualcomm urges device makers to push patches after ‘targeted’ exploitation Feedly Summary: Given Amnesty’s involvement, it’s a safe bet spyware is in play Qualcomm has issued 20 patches for its chipsets’ firmware, including one Digital Signal Processor (DSP) software flaw that has been exploited in the wild.… AI…

Cisco Talos Blog: Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities

—

by

Source URL: https://blog.talosintelligence.com/microsoft-patch-tuesday-october-2024/ Source: Cisco Talos Blog Title: Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilities Feedly Summary: The two vulnerabilities that Microsoft reports have been actively exploited in the wild and are publicly known are both rated as only being of “moderate” severity. AI Summary and Description: Yes…

Hacker News: PSA: Don’t use iPhone Mirroring on your work computer

—

by

Source URL: https://www.sevcosecurity.com/iphone-mirroring-expose-employee-personal-information/ Source: Hacker News Title: PSA: Don’t use iPhone Mirroring on your work computer Feedly Summary: Comments AI Summary and Description: Yes Summary: A significant privacy vulnerability has been identified in macOS 15.0 Sequoia and iOS 18 involving the “iPhone Mirroring” feature, exposing personal app data from users’ iPhones to corporate IT departments.…

Slashdot: Attackers Exploit Critical Zimbra Vulnerability Using CC’d Email Addresses

Oct 3, 2024

—

by

Source URL: https://it.slashdot.org/story/24/10/02/230241/attackers-exploit-critical-zimbra-vulnerability-using-ccd-email-addresses Source: Slashdot Title: Attackers Exploit Critical Zimbra Vulnerability Using CC’d Email Addresses Feedly Summary: AI Summary and Description: Yes Summary: The text discusses a critical vulnerability (CVE-2024-45519) in Zimbra mail servers that attackers are exploiting to execute malicious commands and install backdoors. This situation poses significant risks for medium and large organizations…

The Register: Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing

Oct 2, 2024

—

by

Source URL: https://www.theregister.com/2024/10/02/cisa_optigo_switch_flaws/ Source: The Register Title: Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing Feedly Summary: Poor use of PHP include() strikes again Two trivial but critical security holes have been found in Optigo’s Spectra Aggregation Switch, and so far no patch is available.… AI Summary and Description:…

The Register: Patch now: Critical Nvidia bug allows container escape, complete host takeover

Sep 26, 2024

—

by