vulnerability – Page 4 – PossibleThreat Articles

Apple silently pulls its latest zero-day update – what now?

July 11, 2023 0 Comments Apple, Apple Safari, iOS, OS X, rapid security response, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Tue, 11 Jul 2023 15:21:07 +0000

Previously, we said “do it today”, but now we’re forced back on: “Do not delay; do it as soon as Apple and your device will let you.”

Security Sophos

Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs

July 10, 2023 0 Comments 0 day, Apple, Apple Safari, cve-2023-37450, iOS, OS X, Uncategorized, vulnerability, webkit, zero day

Credit to Author: Paul Ducklin| Date: Mon, 10 Jul 2023 23:12:04 +0000

Don’t delay, do it today. This is a code-implantation bug in WebKit that attackers already know how to exploit.

Security Sophos

Update 5: Information on MOVEit Vulnerabilities CVE-2023-34362, CVE-2023-35036, CVE-2023-35708, and CVE-2023-36934

July 7, 2023 0 Comments cve-2023-34362, cve-2023-35036, cve-2023-35708, cve-2023-36932, cve-2023-36933, cve-2023-36934, dev-0950, Exploit, featured, fin11, mdr, moveit, progress software, security operations, ta505, threat research, vulnerability

Credit to Author: Christopher Budd| Date: Mon, 05 Jun 2023 21:50:09 +0000

Users of the file-transfer package should apply patches immediately and check for indications of possible compromise

Security Sophos

Firefox 115 is out, says farewell to users of older Windows and Mac versions

July 6, 2023 0 Comments firefox, Patch, vulnerability

Credit to Author: Paul Ducklin| Date: Wed, 05 Jul 2023 18:58:26 +0000

No zero-days this month, so you’re patching to stay ahead, not merely to catch up!

Security Sophos

Firefox 115 is out, says farewell to older Windows and Mac users

July 5, 2023 0 Comments firefox, Patch, vulnerability

Credit to Author: Paul Ducklin| Date: Wed, 05 Jul 2023 16:58:26 +0000

No zero-days this month, so you’re patching to stay ahead, not merely to catch up!

Security Sophos

Ghostscript bug could allow rogue documents to run system commands

July 4, 2023 0 Comments command injection, cve-2023-36664, ghostscript, pipe, rce, vulnerability

Credit to Author: Paul Ducklin| Date: Tue, 04 Jul 2023 17:57:16 +0000

Even if you’ve never heard of the venerable Ghostscript project, you may have it installed without knowing.

Security Sophos

WordPress plugin lets users become admins – Patch early, patch often!

July 3, 2023 0 Comments cve-2023-3460, Patch, ultimate members, vulnerability

Credit to Author: Paul Ducklin| Date: Mon, 03 Jul 2023 16:48:27 +0000

Ultimate Member plugin lets rogue users choose their own site capabilities, including becoming admins.

Security Sophos

S3 Ep141: What was Steve Jobs’s first job?

June 29, 2023 0 Comments Apple, bust, cryptocurrency, Cybercrime, data loss, Hacking, iPhone, Law & order, malware, Naked Security Podcast, Podcast, Privacy, twitter, vulnerability, zero day

Credit to Author: Paul Ducklin| Date: Thu, 29 Jun 2023 16:58:40 +0000

Latest episode – listen now! (Full transcript inside.)

MalwareBytes Security

Surveillance camera insecurities argument comes to one inevitable conclusion: Always update

June 28, 2023 0 Comments Business, camera, cctv, china, council, fix, Flaw, Government, local, organisation, Patch, surveillance, update, vulnerability

Categories: Business

Tags: camera

Tags: CCTV

Tags: surveillance

Tags: council

Tags: organisation

Tags: government

Tags: local

Tags: china

Tags: vulnerability

Tags: flaw

Tags: fix

Tags: patch

Tags: update

We take a look at a debate over who is responsible for ensuring surveillance systems are as secure as they can be.

Security Sophos

S3 Ep140: So you think you know ransomware?

June 22, 2023 0 Comments asus, kim dotcom, Law & order, megaupload, moveit, Naked Security Podcast, Podcast, vulnerability

Credit to Author: Paul Ducklin| Date: Thu, 22 Jun 2023 16:48:39 +0000

Lots to learn this week – listen now! (Full transcript inside.)