Adobe Patches Vulnerability Affecting Internal Systems

Adobe has patched what researchers describe as a potentially serious security issue in its internal systems, but the company has downplayed the impact of the vulnerability.

read more

http://feedproxy.google.com/~r/Securityweek/~3/9gt_-Y1E314/adobe-patches-vulnerability-affecting-internal-systems




ABB to Patch Code Execution Flaw in HMI Tool

Swiss industrial tech company ABB is working on a patch for a serious arbitrary code execution vulnerability affecting one of its engineering tools.

read more

http://feedproxy.google.com/~r/Securityweek/~3/mOpmPDw6oXE/abb-patch-code-execution-flaw-hmi-tool




Cisco Finds Serious Flaws in Policy Suite, SD-WAN Products

Cisco informed customers on Wednesday that it has found and patched over a dozen critical and high severity vulnerabilities in its Policy Suite, SD-WAN, WebEx and Nexus products.

read more

http://feedproxy.google.com/~r/Securityweek/~3/7YWmO5YTdig/cisco-finds-serious-flaws-policy-suite-sd-wan-products




Vulnerability or Not? Pen Tester Quarrels With Software Maker

Security Industry Battles Over Testing Methods

read more

http://feedproxy.google.com/~r/Securityweek/~3/KB_A0RKskYY/vulnerability-or-not-pen-tester-quarrels-software-maker




Oracle Patches Record 334 Vulnerabilities in July 2018

Oracle Patches Over 200 Remotely Exploitable Vulnerabilities in July 2018 Critical Patch Update

read more

http://feedproxy.google.com/~r/Securityweek/~3/3mznWehmppE/oracle-patches-record-334-vulnerabilities-july-2018




Microsoft Offers $100,000 in New Identity Bug Bounty Program

Microsoft on Tuesday announced the launch of a new bug bounty program that offers researchers the opportunity to earn up to $100,000 for discovering serious vulnerabilities in the company’s various identity services.

read more

http://feedproxy.google.com/~r/Securityweek/~3/tMbH0NcJJy4/microsoft-offers-100000-new-identity-bug-bounty-program




Siemens Informs Customers of New Meltdown, Spectre Variants

Siemens recently updated its security bulletin for the Meltdown and Spectre vulnerabilities to inform customers of the latest variants, specifically the ones known as LazyFP and Spectre 1.1.

read more

http://feedproxy.google.com/~r/Securityweek/~3/9sZcK2vuns4/siemens-informs-customers-new-meltdown-spectre-variants




Russia’s National Vulnerability Database Slow, Incomplete

Russia’s national vulnerability database is slow, incomplete and it focuses on security flaws that could pose a threat to the country’s IT systems, according to an analysis conducted by threat intelligence firm Recorded Future.

read more

http://feedproxy.google.com/~r/Securityweek/~3/9_78NGk-87Y/russias-national-vulnerability-database-slow-incomplete




Flaws Expose Siemens Protection Relays to DoS Attacks

Siemens has informed customers that some of the company’s SIPROTEC protection relays are exposed to denial-of-service (DoS) attacks due to a couple of vulnerabilities present in the EN100 communication module.

read more

http://feedproxy.google.com/~r/Securityweek/~3/9l7Lp7phXPQ/flaws-expose-siemens-protection-relays-dos-attacks




Cisco Patches High Risk Flaws in StarOS, IP Phone

Cisco this week released a set of security patches to address several vulnerabilities in its products, including High risk issues impacting StarOS and 6800, 7800, and 8800 Series IP Phones.

read more

http://feedproxy.google.com/~r/Securityweek/~3/bvV7K5z1Ugg/cisco-patches-high-risk-flaws-staros-ip-phone