Latest Security Update news

Microsoft fixes Windows 10 security update installation issue

Microsoft has resolved a known issue that caused Windows 10 security updates released during this month's Patch Tuesday to fail with 0x8007000d errors.
- Sergiu Gatlan
- October 16, 2023
- 07:53 AM
- 2
Microsoft: October Windows 10 security updates fail to install

Microsoft says Windows 10 security updates released during this month's Patch Tuesday may fail to install with 0x8007000d errors, although initially displaying progress.
- Sergiu Gatlan
- October 13, 2023
- 03:56 PM
- 2
Microsoft Exchange gets ‘better’ patch to mitigate critical bug

The Exchange Team asked admins to deploy a new and "better" patch for a critical Microsoft Exchange Server vulnerability initially addressed in August.
- Sergiu Gatlan
- October 10, 2023
- 04:03 PM
- 0
Windows 11 KB5031354 cumulative update released with new features

Microsoft has released the Windows 11 22H2 KB5031354 cumulative update to fix security vulnerabilities. This is the first Patch Tuesday update with access to Windows 11 Moment 4 features provide you turn on the "Get latest updates" toggle
- Mayank Parmar
- October 10, 2023
- 02:05 PM
- 4
Microsoft October 2023 Patch Tuesday fixes 3 zero-days, 104 flaws

Today is Microsoft's October 2023 Patch Tuesday, with security updates for 104 flaws, including three actively exploited zero-day vulnerabilities.
- Lawrence Abrams
- October 10, 2023
- 01:49 PM
- 5
New critical Citrix NetScaler flaw exposes 'sensitive' data

Citrix NetScaler ADC and NetScaler Gateway are impacted by a critical severity flaw that allows the disclosure of sensitive information from vulnerable appliances.
- Bill Toulas
- October 10, 2023
- 11:53 AM
- 0
Exim patches three of six zero-day bugs disclosed last week

Exim developers have released patches for three of the zero-days disclosed last week through Trend Micro's Zero Day Initiative (ZDI), one of them allowing unauthenticated attackers to gain remote code execution.
- Sergiu Gatlan
- October 02, 2023
- 05:50 PM
- 0
Cisco Catalyst SD-WAN Manager flaw allows remote server access

Cisco is warning of five new Catalyst SD-WAN Manager products vulnerabilities with the most critical allowing unauthenticated remote access to the server.
- Bill Toulas
- September 28, 2023
- 11:15 AM
- 0
GitLab urges users to install security updates for critical pipeline flaw

GitLab has released security updates to address a critical severity vulnerability that allows attackers to run pipelines as other users via scheduled security scan policies.
- Bill Toulas
- September 19, 2023
- 01:06 PM
- 0
Google extends security update support for Chromebooks to 10 years

Google has announced the Auto Update Expiration (AUE) date will be extended from 5 years to 10 for all Chromebooks, guaranteeing a decade of monthly security updates.
- Bill Toulas
- September 15, 2023
- 12:05 PM
- 1
Microsoft September 2023 Patch Tuesday fixes 2 zero-days, 59 flaws

Today is Microsoft's September 2023 Patch Tuesday, with security updates for 59 flaws, including two actively exploited zero-day vulnerabilities.
- Lawrence Abrams
- September 12, 2023
- 02:11 PM
- 0
Cisco BroadWorks impacted by critical authentication bypass flaw

A critical vulnerability impacting the Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow remote attackers to forge credentials and bypass authentication.
- Bill Toulas
- September 07, 2023
- 04:10 PM
- 0
September Android updates fix zero-day exploited in attacks

The September 2023 Android security updates tackle 33 vulnerabilities, including a zero-day bug currently targeted in the wild.
- Sergiu Gatlan
- September 06, 2023
- 12:20 PM
- 1
Microsoft Exchange updates pulled after breaking non-English installs

Microsoft has pulled Microsoft Exchange Server's August security updates from Windows Update after finding they break Exchange on non-English installs.
- Lawrence Abrams
- August 10, 2023
- 02:26 PM
- 0
Microsoft August 2023 Patch Tuesday warns of 2 zero-days, 87 flaws

Today is Microsoft's August 2023 Patch Tuesday, with security updates for 87 flaws, including two actively exploited and twenty-three remote code execution vulnerabilities.
- Lawrence Abrams
- August 08, 2023
- 01:54 PM
- 2
Adobe fixes patch bypass for exploited ColdFusion CVE-2023-29298 flaw

Adobe released an emergency ColdFusion security update that fixes critical vulnerabilities, including a fix for a new zero-day exploited in attacks.
- Lawrence Abrams
- July 19, 2023
- 04:37 PM
- 0
Cisco SD-WAN vManage impacted by unauthenticated REST API access

The Cisco SD-WAN vManage management software is impacted by a flaw that allows an unauthenticated, remote attacker to gain read or limited write permissions to the configuration of the affected instance.
- Bill Toulas
- July 13, 2023
- 05:53 PM
- 0
Apple re-releases zero-day patch after fixing browsing issue

Apple fixed and re-released emergency security updates addressing a WebKit zero-day vulnerability exploited in attacks. The initial patches had to be withdrawn on Monday due to browsing issues on certain websites.
- Sergiu Gatlan
- July 12, 2023
- 05:27 PM
- 0
Fortinet warns of critical RCE flaw in FortiOS, FortiProxy devices

Fortinet has disclosed a critical severity flaw impacting FortiOS and FortiProxy, allowing a remote attacker to perform arbitrary code execution on vulnerable devices.
- Bill Toulas
- July 12, 2023
- 10:40 AM
- 0
Windows 11 KB5028185 cumulative update released with Moment 3 features

Microsoft has released the mandatory Windows 11 22H2 KB5028185 cumulative update to fix security vulnerabilities, enable the new Moment 3 features, and make over 30 improvements.
- Lawrence Abrams
- July 11, 2023
- 02:10 PM
- 1