Researchers have discovered threat actors launching zero-day attack against packages in the Python Package Index (PyPI) repository.
Threat actors launch zero-day attack against Python Package Index (PyPI) packages Read More »
As the catastrophic Log4j vulnerability continues to cause havoc on the internet and organizations, Google in collaboration with security firm Code Intelligence has released an update to open source fuzzer (OSS-Fuzz) that can detect the Log4Shell vulnerability.
Google adds OSS-Fuzz open source fuzzer capability to discover Log4Shell vulnerability Read More »
Microsoft has open sourced CodeQL queries used to scan for Solorigate malware activity that matches the SolarWinds supply-chain attack.
Microsoft open sources CodeQL queries to scan for Solarwinds-like Solorigate activity Read More »
Microsoft has released the October 2020 Security updates that includes patches for 87 vulnerabilities, 11 of them rated Critical. The update also includes a patch for a Critical “Bad Neighbor” vulnerability and two out-of-band patches.
Microsoft October 2020 Security Updates and “Bad Neighbor” RCE fix (updated) Read More »
Jenkins, a popular open source automation server software, has patched a Critical buffer corruption vulnerability CVE-2019-17638 in bundled Jetty.
Jenkins patches Critical vulnerability (CVE-2019-17638) Read More »
Microsoft released the March 2020 Security Updates that include 115 unique vulnerability fixes, 26 of those rated critical. This is the largest patch release in Microsoft’s history. Microsoft also issued guidance and a new security update to fix an SMBv3 RCE vulnerability dubbed SMBGhost.
Microsoft March 2020 Security Updates, fix for SMBv3 RCE vulnerability (updated) Read More »
Microsoft has introduced a new source code analyzer tool dubbed Microsoft Application Inspector. The tool is designed to “identify interesting features in source code” and can help enable developers understand software components your apps use.
Microsoft introduces Application Inspector Read More »
GitHub, one of the world’s leading software development platforms, has launched GitHub Security Lab with aim to secure open source software.
GitHub launches ‘Security Lab’ to help secure open source software Read More »
The CERT Coordination Center (CERT/CC) has released a security advisory describing multiple vulnerabilities that impact Broadcom WiFi chipset drivers. Four vendors have confirmed they are impacted at the time of the latest published advisory on Wednesday.
Broadcom WiFi chipset driver vulnerabilities Read More »
Does your organization have any Redis servers exposed to the internet? If so, you should disconnect them from the public and ensure Redis services are exposed to only “trusted” environments such as your internal company network.
Internet exposed Redis servers Read More »
