SAP on Tuesday released its security updates for August 2018. The latest round of updates includes over two dozen patches, but none of them are for critical (hot news) vulnerabilities. read more http://feedproxy.google.com/~r/Securityweek/~3/hCr7GFhy6fU/sap-releases-august-2018-securi..
Tag : Vulnerabilities
The details of three new speculative execution vulnerabilities affecting Intel Xeon and Core processors were disclosed on Tuesday. The flaws have been dubbed Foreshadow and L1 Terminal Fault (L1TF), and patches and mitigations are already available. read more http://feedproxy.google.com/~r/Securityweek/~3/WmLbSbDCOSU/foreshadowl1tf-what-you..
Microsoft’s Patch Tuesday updates for August 2018 address 60 vulnerabilities, including two zero-day flaws affecting Windows and Internet Explorer. read more http://feedproxy.google.com/~r/Securityweek/~3/979NF5TcrSM/microsoft-patches-zero-day-flaws-windows-interne..
Researchers and several major tech companies on Tuesday disclosed the details of three new speculative execution side-channel vulnerabilities affecting Intel processors. read more http://feedproxy.google.com/~r/Securityweek/~3/MhaZ4FjuRiA/foreshadow-new-speculative-execution-flaws-found-..
Vulnerability Allows a Second Factor for One Account to be Used for All Accounts in an Organization read more http://feedproxy.google.com/~r/Securityweek/~3/lPClaAiSdEw/vulnerability-could-allow-insider-bypass-ceos-multi-factor-auth..
The Patch Tuesday updates released by Adobe for August 2018 address nearly a dozen vulnerabilities in Flash Player, the Creative Cloud Desktop Application, Experience Manager, and Acrobat and Reader. read more http://feedproxy.google.com/~r/Securityweek/~3/89iVIWeptEg/adobe-patches-11-flaws-across-fou..
A team of researchers has disclosed the details of a new attack method that can be used to crack encrypted communications. The products of several vendors, including Cisco, Huawei, ZyXEL and Clavister, are impacted. read more http://feedproxy.google.com/~r/Securityweek/~3/hoQfl-_pJdY/crypto-flaw-affects-products-cisco-hu..
The U.S. Department of Defense on Monday announced the launch of “Hack the Marine Corps,” the Military’s sixth bug bounty program. Similar to previous programs run by the Pentagon, Hack the Marine Corps is hosted by bug bounty platform HackerOne. read more http://feedproxy.google.com/~r/Securityweek/~3/clV5MyzX1mk/dod-launches-hack-marine-corps-bug-boun..
An industrial router made by Australian telecommunications equipment company NetComm Wireless is affected by several serious vulnerabilities that can be exploited remotely to take control of affected devices. read more http://feedproxy.google.com/~r/Securityweek/~3/PQPBJS6zXOk/critical-flaws-found-netcomm-industri..
Patch management has always been an evergreen topic for security practitioners. Each time poor patching is identified as the root cause of a breach, it triggers a new flood of opinions on the countless dos and don’ts of triaging common vulnerabilities and exposures (CVEs), understanding criticality scores, and deploying patches. Often left out of the ..
