Endpoint Management / Endpoint Security / Endpoint Security and Management / Featured Articles / Security Research and Intelligence / Vulnerability Management

A Cup Half Empty: Linux RCE Flaws Discovered In CUPS

It's been a rough year for Linux! The XZ Utils bug caused tremors worldwide in March, and with the recent…

Comments Off on A Cup Half Empty: Linux RCE Flaws Discovered In CUPS

October 1, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Patch Management / Security Research and Intelligence / Vulnerability Management

Microsoft Addresses 79 Flaws, 4 Zero Days in September 2024 Patch Tuesday

September's coming in hot! Out of the 79 vulnerabilities it has under its belt, 4 are zero-days, and each zero-day…

Comments Off on Microsoft Addresses 79 Flaws, 4 Zero Days in September 2024 Patch Tuesday

September 11, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Patch Management / Security Research and Intelligence / Vulnerability Management

Zyxel Users Beware: Critical OS Command Injection Flaw Threatens Routers

Zyxel, a communications company, has released an advisory warning users of a critical input validation vulnerability impacting many of its…

Comments Off on Zyxel Users Beware: Critical OS Command Injection Flaw Threatens Routers

September 4, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Patch Management / Security Research and Intelligence / Vulnerability Management

Critical Apache OFBiz Flaw Makes Waves Worldwide

Apache just patched a critical vulnerability (christened CVE-2024-38856) in OFBiz, their open-source ERP system. Discovered by SonicWall Capture Labs, this…

Comments Off on Critical Apache OFBiz Flaw Makes Waves Worldwide

August 7, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Patch Management / Security Research and Intelligence / Vulnerability Management

GeoServer Critical RCE Flaw Actively Exploited, Warns CISA

GeoServer, an open-source tool used to share and modify geospatial data, is under attack. CVE-2024-36401, which impacts the GeoTools plugin,…

Comments Off on GeoServer Critical RCE Flaw Actively Exploited, Warns CISA

July 18, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Featured Articles / Patch Management / Security Research and Intelligence / Vulnerability Management

Unveiling regreSSHion: Critical OpenSSH Flaw Found In Linux Systems

Linux users beware! OpenSSH flaw, a networking utility installed on every Unix and Linux system by default, is affected by…

Comments Off on Unveiling regreSSHion: Critical OpenSSH Flaw Found In Linux Systems

July 4, 2024

Patch Management / Security Research and Intelligence

RCE Flaw Discovered in PHP’s Windows Versions

The well-known open-source scripting language PHP (Hypertext Preprocessor) just had a critical RCE flaw patched and disclosed. Found and reported…

Comments Off on RCE Flaw Discovered in PHP’s Windows Versions

June 10, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Featured Articles / Patch Management / Security Research and Intelligence / Vulnerability Management

Microsoft Fixes 60 Vulnerabilities, 2 Rated Critical, in March 2024 Patch Tuesday

It's been a calm year so far for patches! January saw no zero days, February only saw two, and March…

Comments Off on Microsoft Fixes 60 Vulnerabilities, 2 Rated Critical, in March 2024 Patch Tuesday

March 13, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Patch Management / Security Research and Intelligence / Vulnerability Management

VMWare Catches New Critical ESXi Sandbox Escape Bugs

VMWare's latest advisory reveals four new vulnerabilities affecting its ESXi, Workstation, Fusion, and Cloud Foundation products. Each vulnerability has been…

Comments Off on VMWare Catches New Critical ESXi Sandbox Escape Bugs

March 6, 2024

Endpoint Management / Endpoint Security / Endpoint Security and Management / Patch Management / Security Research and Intelligence / Vulnerability Management

Critical Zero-Day Authentication Bypass Vulnerability (CVE-2024-0204) in Fortra GoAnywhere MFT.

If you're using a version of Fortra's GoAnywhere MFT that's lower than 7.4.1, you'll likely be shocked to know that…

Comments Off on Critical Zero-Day Authentication Bypass Vulnerability (CVE-2024-0204) in Fortra GoAnywhere MFT.

January 25, 2024