This week, SAP released its October 2018 set of patches, which includes the first Hot News security note for SAP BusinessObjects in over five years.
http://feedproxy.google.com/~r/Securityweek/~3/YEL2-Gjt0Dg/sap-patches-critical-vulnerability-businessobjects
Siemens informed customers this week that many of its products are affected by the recently disclosed processor vulnerabilities known as Foreshadow and L1 Terminal Fault (L1TF).
http://feedproxy.google.com/~r/Securityweek/~3/9LkgU6JtTcY/many-siemens-products-affected-foreshadow-vulnerabilities
Microsoft’s Patch Tuesday updates for October 2018 resolve nearly 50 vulnerabilities, including a Windows zero-day flaw exploited by an advanced persistent threat (APT) actor known as FruityArmor.
http://feedproxy.google.com/~r/Securityweek/~3/dhmgN9IIl90/microsoft-patches-windows-zero-day-exploited-fruityarmor-group
The Patch Tuesday updates released this month by Adobe for Flash Player include no security fixes. The company did address several vulnerabilities in some of its other products.
http://feedproxy.google.com/~r/Securityweek/~3/Ycpej__1zAs/no-security-fixes-patch-tuesday-updates-flash-player
New US weapons systems being developed by the US Department of Defense can be easily be hacked by adversaries, a new government report said on Tuesday.
http://feedproxy.google.com/~r/Securityweek/~3/JAjQldcr-yw/new-pentagon-weapons-systems-easily-hacked-report
A significant number of vulnerabilities have been found recently in products from China-based WECON, but the vendor has been slow to release patches.
http://feedproxy.google.com/~r/Securityweek/~3/xbNJXsYGzho/code-execution-flaws-found-wecon-industrial-products
One Year After Release, Google Fuzzer Still Finds Many Flaws in Safari
One year after it was released as open source by Google Project Zero, the Domato fuzzer has still found a significant number of vulnerabilities in Apple’s Safari web browser.
http://feedproxy.google.com/~r/Securityweek/~3/75x5jBJuUUA/google-criticizes-apple-over-safari-security-flaw-disclosures
D-Link has released patches for several remote code execution and cross-site scripting (XSS) vulnerabilities found by researchers in the company’s Central WiFiManager access point management tool.
http://feedproxy.google.com/~r/Securityweek/~3/9OILIaAWpVw/d-link-patches-code-execution-xss-flaws-management-tool
The U.S. Department of Defense’s sixth public bug bounty program, Hack the Marine Corps, has concluded, and white hat hackers who took part in the challenge earned more than $150,000.
http://feedproxy.google.com/~r/Securityweek/~3/3hgqlf_gbHo/hackers-earn-150000-marine-corps-bug-bounty-program
An iPhone enthusiast has disclosed yet another method for bypassing the iPhone lockscreen. The latest technique has been confirmed to work on the new iPhone XS running the latest version of Apple’s mobile operating system, iOS 12.
http://feedproxy.google.com/~r/Securityweek/~3/NOc5E4Nj-dI/passcode-bypass-method-exposes-photos-contacts-iphone-xs