This week, SAP released its October 2018 set of patches, which includes the first Hot News security note for SAP BusinessObjects in over five years. read more http://feedproxy.google.com/~r/Securityweek/~3/YEL2-Gjt0Dg/sap-patches-critical-vulnerability-busin..
Tag : Vulnerabilities
Siemens informed customers this week that many of its products are affected by the recently disclosed processor vulnerabilities known as Foreshadow and L1 Terminal Fault (L1TF). read more http://feedproxy.google.com/~r/Securityweek/~3/9LkgU6JtTcY/many-siemens-products-affected-foreshadow-vulne..
Microsoft’s Patch Tuesday updates for October 2018 resolve nearly 50 vulnerabilities, including a Windows zero-day flaw exploited by an advanced persistent threat (APT) actor known as FruityArmor. read more http://feedproxy.google.com/~r/Securityweek/~3/dhmgN9IIl90/microsoft-patches-windows-zero-day-exploited-fruitya..
The Patch Tuesday updates released this month by Adobe for Flash Player include no security fixes. The company did address several vulnerabilities in some of its other products. read more http://feedproxy.google.com/~r/Securityweek/~3/Ycpej__1zAs/no-security-fixes-patch-tuesday-updates-fl..
New US weapons systems being developed by the US Department of Defense can be easily be hacked by adversaries, a new government report said on Tuesday. read more http://feedproxy.google.com/~r/Securityweek/~3/JAjQldcr-yw/new-pentagon-weapons-systems-easily-hac..
A significant number of vulnerabilities have been found recently in products from China-based WECON, but the vendor has been slow to release patches. read more http://feedproxy.google.com/~r/Securityweek/~3/xbNJXsYGzho/code-execution-flaws-found-wecon-industria..
One Year After Release, Google Fuzzer Still Finds Many Flaws in Safari One year after it was released as open source by Google Project Zero, the Domato fuzzer has still found a significant number of vulnerabilities in Apple’s Safari web browser. read more http://feedproxy.google.com/~r/Securityweek/~3/75x5jBJuUUA/google-criticizes-apple-over-safari-security-flaw-d..
D-Link has released patches for several remote code execution and cross-site scripting (XSS) vulnerabilities found by researchers in the company’s Central WiFiManager access point management tool. read more http://feedproxy.google.com/~r/Securityweek/~3/9OILIaAWpVw/d-link-patches-code-execution-xss-flaws-manag..
The U.S. Department of Defense’s sixth public bug bounty program, Hack the Marine Corps, has concluded, and white hat hackers who took part in the challenge earned more than $150,000. read more http://feedproxy.google.com/~r/Securityweek/~3/3hgqlf_gbHo/hackers-earn-150000-marine-corps-bug-boun..
An iPhone enthusiast has disclosed yet another method for bypassing the iPhone lockscreen. The latest technique has been confirmed to work on the new iPhone XS running the latest version of Apple’s mobile operating system, iOS 12. read more http://feedproxy.google.com/~r/Securityweek/~3/NOc5E4Nj-dI/passcode-bypass-method-exposes-photos-contacts..
