Browsing Category
Patching
25 posts
Zero-click Windows Flaw Leaks Credentials after Incomplete Patch
Incomplete Microsoft patch is exploited by APT28, allowing attackers to capture NTLM hashes when Windows renders a malicious shortcut.
Midnight Deadline Set After Cisco Firewall Backdoor Survives Patching
CISA confirms at least one federal agency was breached; patches alone did not remove the implant.
NIST Scales Back CVE Details to Manage Report Surge
NIST will narrow its focus on CVE analysis, prioritizing urgent vulnerabilities, amidst a surge in submissions and AI-generated reports.
Router Ban? Netgear Says Not So Fast
Netgear gets green light as FCC targets foreign routers.
Adobe Patches Acrobat Zero-day Under Attack
A critical vulnerability in Adobe Acrobat and Reader is being actively exploited, allowing attackers to take control of affected systems through malicious documents.
Bruce Schneier Pushes Back on Claude Mythos Cyber Hype
Anthropic’s Claude Mythos Preview is fueling hope over AI-driven cyberattacks, but Schneier says benchmark wins don’t equal real-world risk—yet.
Poisoned Update Drops RAT on Sites
Smart Slider's Pro version briefly delivered malware, risking user sites with critical vulnerabilities before being fixed.
Sonatype Issues Patch for Critical Remote Code Execution Bug
A vulnerability in Sonatype Nexus Repository could allow an attacker to bypass security controls and execute remote code on targeted systems.
Fortinet Warns of Active Server Attacks
Fortinet issued emergency hotfixes for a critical vulnerability in FortiClient EMS that allows remote code execution.
Windows Updates Secure Boot Certificates to Prevent BSoD,
Microsoft is updating Secure Boot certificates to prevent boot failures and vulnerabilities in devices.