Hot Topics

Time to Patch

Apple & Microsoft Patch Tuesday, July 2023 Edition

Apple & Microsoft Patch Tuesday, July 2023 Edition

| | Adam Barnett, Andrew Brandt, Apple zero-day, cisco, CVE-2023-32046, CVE-2023-32049, CVE-2023-35311, CVE-2023-36884, Immersive Labs, iOS 16.5.1, Kevin Breen, macOS 13.4.1, Patch Tuesday July 2023, rapid7, Safari 16.5.2, Security Tools, sophos, Storm-0978, Time to Patch, Trend Micro
Microsoft Corp. today released software updates to quash 130 security bugs in its Windows operating systems and related software, including at least five flaws that are already seeing active exploitation. Meanwhile, Apple ...
Krebs on Security
CISA Order Highlights Persistent Risk at Network Edge

CISA Order Highlights Persistent Risk at Network Edge

| | Adam Boileau, Barracuda Networks, cisa, CVE-2023-27997, Cybersecurity and Infrastructure Security Agency, Fortinet, Fortra, GoAnywhere, Latest Warnings, Mandiant, MOVEit Transfer, Patrick Gray, Progress Software, risky-business-podcast, The Coming Storm, Time to Patch
The U.S. government agency in charge of improving the nation's cybersecurity posture is ordering all federal civilian agencies to take new measures to restrict access to Internet-exposed networking equipment. The directive comes ...
Krebs on Security
Microsoft Patch Tuesday, June 2023 Edition

Microsoft Patch Tuesday, June 2023 Edition

| | Action1, CVE-2023-28310, CVE-2023-29357, CVE-2023-29363, CVE-2023-32014, CVE-2023-32015, CVE-2023-32031, Immersive Labs, Kevin Breen, Microsoft Patch Tuesday June 2023, Security Tools, Time to Patch
Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This month's relatively light patch load has another added bonus for system ...
Krebs on Security
Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

Barracuda Urges Replacing — Not Patching — Its Email Security Gateways

| | Barracuda Networks, Caitlin Condon, CVE-2023-2868, Email Security Gateway, International Computer Science Institute, Latest Warnings, Mandiant, Nicholas Weaver, rapid7, Time to Patch
It's not often that a zero-day vulnerability causes a network security vendor to urge customers to physically remove and decommission an entire line of affected hardware -- as opposed to just applying ...
Krebs on Security
Microsoft Patch Tuesday, May 2023 Edition

Microsoft Patch Tuesday, May 2023 Edition

| | Adam Barnett, BlackLotus, CVE-2023-24932, CVE-2023-24941, CVE-2023-28283, CVE-2023-29325, CVE-2023-29336, Immersive Labs, Kevin Breen, rapid7, SANS Internet Storm Center, Time to Patch
Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited ...
Krebs on Security
Many Public Salesforce Sites are Leaking Private Data

Many Public Salesforce Sites are Leaking Private Data

| | A Little Sunshine, Charan Akiri, DC Health, DC Health Link, Huntington Bank, Latest Warnings, Matthew Jennings, Mike Rupert, Salesforce Community websites, Scott Carbee, TCF Bank, The Coming Storm, Time to Patch, Vermont
A shocking number of organizations -- including banks and healthcare providers -- are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem ...
Krebs on Security
Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

| | Bharat Jogi, CVE-2022-37969, CVE-2023-28219, CVE-2023-28220, CVE-2023-28252, DBAPPSecurity, Dustin Childs, iOS 15.5.7, iOS/iPadOS 16.4.1, Mandiant, Nokoyawa ransomware, Qualys, Security Tools, The Coming Storm, Time to Patch, Trend Micro Zero Day Initiative, Windows Common Log System File System
Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to ...
Krebs on Security
Microsoft Patch Tuesday, March 2023 Edition

Microsoft Patch Tuesday, March 2023 Edition

| | CVE-2023-23397, CVE-2023-24800, Dustin Childs, Immersive Labs, Kevin Breen, Microsoft 365 Apps for Enterprise, Microsoft Patch Tuesday March 2023, rapid7, Security Tools, The Coming Storm, Time to Patch, Windows SmartScreen, Zero Day Initiative
Microsoft on Tuesday released updates to quash at least 74 security bugs in its Windows operating systems and software. Two of those flaws are already being actively attacked, including an especially severe ...
Krebs on Security
Microsoft Patch Tuesday, February 2023 Edition

Microsoft Patch Tuesday, February 2023 Edition

| | CVE-2023-21529, CVE-2023-21706, CVE-2023-21707, CVE-2023-21715, CVE-2023-21716, CVE-2023-21823, CVE-2023-23376, Dustin Childs, Immersive Labs, Internet Explorer 11, Johannes Ullrich, Kevin Breen, Latest Warnings, Mandiant, Microsoft Office, Microsoft Patch Tuesday February 2023, SANS Internet Storm Center, Security Tools, Time to Patch, Trend Micro Zero Day Initiative
Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year's ...
Krebs on Security
Microsoft Patch Tuesday, January 2023 Edition

Microsoft Patch Tuesday, January 2023 Edition

| | CVE-2023-21563, CVE-2023-21674, CVE-2023-21678, CVE-2023-21743, CVE-2023-21745, CVE-2023-21762, Dustin Childs, Latest Warnings, Microsoft BitLocker, Satnam Narang, Security Tools, Tenable, Time to Patch
Microsoft today released updates to fix nearly 100 security flaws in its Windows operating systems and other software. Highlights from the first Patch Tuesday of 2023 include a zero-day vulnerability in Windows, ...
Krebs on Security
Load more