New zero-day attack exploits old Windows vulnerability to take 'full control' of 'major antivirus' products
News vulnerabilities
Cross Channel: Cloud Adoption, ‘Rampant’ Vulnerabilities And Datto Targets UK MSPs
All the news from the world of the IT channel, including a cloud adoption high in the UK and "rampant" security vulnerabilities
WhatsApp & Telegram Patch ‘Severe’ Vulnerabilities
'Severe vulnerability' found with encrypted chat apps that could allow attackers to take complete control of user accounts
Security Flaws Found In Android Password Managers
The security credentials of Password Managers on Android called into question after discovery of multiple flaws
Researchers Uncover Schneider Electric Data Centre System Flaw
Schneider Electric flaw could have allowed attackers to gain remote access to unencrypted passwords
Oracle Dishes Out 270 Patches In SecondBiggest Security Update Ever
Business applications receive the bulk of the patches as quarterly updates continue to grow
Light Microsoft Patch Tuesday Update For January
Small beer for system admins this month with only four bulletins to worry about, two of which are critical
Gogo Bug Bounty Program To Secure In-Flight Wi-Fi
Gogo looks to secure the skies and stay one step ahead of the hackers with "pro-active" security program
Microsoft Ends 2016 With Patch Tuesday Windows 10 Fix
Internet connection issues for Windows 10 users resolved in last Patch Tuesday update of 2016
Patch Tuesday November 2016: Microsoft Fixes Flaw Controversially Outed By Google
No surprises here. Patch Tuesday arrives to fix vulnerability that is being exploited by Russian hackers
Cisco Admits Incorrect Security Setup Caused Job Applicant Data Leak
Privacy facepalm. Personal details of people applying for jobs at Cisco leaked from unsecure website
Patch Tuesday: Microsoft Tackles Multiple Zero-Day Flaws
Internet Explorer among usual suspects to get updates, that includes a fix for AdGholas malvertising campaign
Android Security Bulletin Patches 78 Vulnerabilities
Busy month for Google as it patches multiple vulnerabilities with the Android operating system
Patch Tuesday: Desktop Focus As Microsoft Tackles Office And Edge Flaws
Patch Tuesday: Admin tasks return to usual following recent Black Hat security conference, with patches for Office and browser flaws
Researchers Discover Major HTTP/2 Flaws
Protocol problems...the new version of the HTTP (HTTP/2) has four “high profile” flaws, researchers caution
Kaspersky Lab Creates Bug Bounty Program
Claims to be first time a security vendor has offered rewards for disclosures of vulnerabilities with its products
Patch Tuesday: Routine For Microsoft, Adobe Is More Pressing
Routine fixes for Office and web browsers, but no flaws are being actively exploited in the wild
400,000 D-Link Devices Vulnerable To Zero-Day Flaw
Security researchers warn of a serious stack overflow vulnerability in a number of devices from D-Link
Serious Vulnerabilities In Symantec Products Are ‘As Bad As It Gets’
Vulnerabilities “are as bad as it gets” says Google's Project Zero, and could endanger millions of users
Uber Vulnerabilities Leak Rider Details And Journey History
Penetration testers brute force Uber for bug bounty programme, and also find hidden $100 free ride voucher
Study Claims HMTL5 Isn’t Much More Secure Than Flash
Flash not so bad? New report casts doubts on HTML5 adverts being safer than Adobe Flash
Cisco Warns Of Libarchive File Compression Flaw
Patch it now! Popular open source file compression tool libarchive contains wide reaching vulnerabilities
Google Dishes Out £376k In Android Bug Bounties
Top researcher pockets £52,000 as Google uses Android vulnerabilities to secure Android N
Patch Tuesday Tackles Browser Flaws Amid Another Adobe Zero-Day
Fixes for Edge and Internet Explorer, but admins warned to pay attention to serious Adobe Flash zero day
Researcher Discovers ‘Multiple’ Exploitable Vulnerabilities In 7-Zip
Update now. Flaw in popular open source compression tool uncovered by Cisco researcher
US Government Warns Hackers Have Exploited SAP Flaw For Six Years
The importance of applying patches in a timely manner highlighted after warning of a SAP flaw fixed in 2010
Microsoft Patch Tuesday Update Tackles Exploited Flash And IE Flaws
“Critical” patches for zero-day vulnerabilities in Internet Explorer, Adobe Flash, and Windows
Oracle Issues 136 Patches In Latest Security Update
System admins beware, as Oracle releases patches for 136 vulnerabilities across entire product range
Security Experts: Uninstall Apple Quicktime From Windows PCs Immediately
Urgent call for Windows users to uninstall Quicktime after Apple halts security updates and retires PC version
Microsoft Patch Tuesday Tackles Tame Badlock Flaw
Much hyped “critical” Badlock flaw tamer than first thought, and only warrants “important” label