Latest Security Update news

Windows 11 KB5015814 update adds Search Highlights feature, 27 fixes

Microsoft has released the Windows 11 KB5015814 cumulative update with security updates, improvements, and the new Search Highlights feature.
- Lawrence Abrams
- July 12, 2022
- 02:54 PM
- 2
Citrix warns critical bug can let attackers reset admin passwords

Citrix warned customers to deploy security updates that address a critical Citrix Application Delivery Management (ADM) vulnerability that can let attackers reset admin passwords.
- Sergiu Gatlan
- June 15, 2022
- 10:46 AM
- 0
Microsoft patches actively exploited Follina Windows zero-day

Microsoft has released security updates with the June 2022 cumulative Windows Updates to address a critical Windows zero-day vulnerability known as Follina and actively exploited in ongoing attacks.
- Sergiu Gatlan
- June 14, 2022
- 02:00 PM
- 3
Android June 2022 updates bring fix for critical RCE vulnerability

Google has released the June 2022 security updates for Android devices running OS versions 10, 11, and 12, fixing 41 vulnerabilities, five rated critical.
- Bill Toulas
- June 07, 2022
- 09:14 AM
- 1
Atlassian fixes Confluence zero-day widely exploited in attacks

Atlassian has released security updates to address a critical zero-day vulnerability in Confluence Server and Data Center actively exploited in the wild to backdoor Internet-exposed servers.
- Sergiu Gatlan
- June 03, 2022
- 01:47 PM
- 0
Apple emergency update fixes zero-day used to hack Macs, Watches

Apple has released new security updates to backport zero-day patches released in March to Macs and Apple Watch devices running older OS versions.
- Sergiu Gatlan
- May 16, 2022
- 02:33 PM
- 1
Fake Windows 10 updates infect you with Magniber ransomware

Fake Windows 10 updates on crack sites are being used to distribute the Magniber ransomware in a massive campaign that started earlier this month.
- Lawrence Abrams
- April 30, 2022
- 10:18 AM
- 7
Spring patches leaked Spring4Shell zero-day RCE vulnerability

Spring released emergency updates to fix the 'Spring4Shell' zero-day remote code execution vulnerability, which leaked prematurely online before a patch was released.
- Lawrence Abrams
- March 31, 2022
- 11:16 AM
- 0
2021 mobile security: Android more vulnerabilities, iOS more zero-days

Mobile security company Zimperium has released its annual mobile threat report where security trends and discoveries in the year that passed lay the groundwork for predicting what's coming in 2022.
- Bill Toulas
- March 14, 2022
- 03:46 PM
- 0
Nearly 30% of critical WordPress plugin bugs don't get a patch

Patchstack, a leader in WordPress security and threat intelligence, has released a whitepaper to present the state of WordPress security in 2021, and the report paints a dire picture.
- Bill Toulas
- March 09, 2022
- 04:33 PM
- 0
QNAP extends critical updates for some unsupported NAS devices

QNAP has extended support and will keep issuing security updates for some end-of-life (EOL) network-attached storage (NAS) devices until October 2022.
- Sergiu Gatlan
- February 14, 2022
- 01:03 PM
- 2
Google fixes remote escalation of privileges bug on Android

Google has released the February 2022 Android security updates, addressing two critical vulnerabilities, one being a remote escalation of privilege that requires no user interaction.
- Bill Toulas
- February 08, 2022
- 04:25 PM
- 1
Microsoft February 2022 Patch Tuesday fixes 48 flaws, 1 zero-day

Today is Microsoft's February 2022 Patch Tuesday, and with it comes fixes for one zero-day vulnerability and a total of 48 flaws.
- Lawrence Abrams
- February 08, 2022
- 01:27 PM
- 6
QNAP force-installs update after DeadBolt ransomware hits 3,600 devices

QNAP force-updated customer's Network Attached Storage (NAS) devices with firmware containing the latest security updates to protect against the DeadBolt ransomware, which has already encrypted over 3,600 devices.
- Lawrence Abrams
- January 28, 2022
- 01:30 AM
- 0
Apple fixes new zero-day exploited to hack macOS, iOS devices

Apple has released security updates to fix two zero-day vulnerabilities, with one publicly disclosed and the other exploited in the wild by attackers to hack into iPhones and Macs.
- Lawrence Abrams
- January 26, 2022
- 02:39 PM
- 1
Windows 11 KB5009566 update released with security fixes

Microsoft has released the Windows 11 KB5009566 cumulative update with security updates, performance improvements, and fixes for known bugs.
- Lawrence Abrams
- January 11, 2022
- 02:28 PM
- 0
Microsoft January 2022 Patch Tuesday fixes 6 zero-days, 97 flaws

Today is Microsoft's January 2022 Patch Tuesday, and with it comes fixes for six zero-day vulnerabilities and a total of 97 flaws.
- Lawrence Abrams
- January 11, 2022
- 01:31 PM
- 2
Microsoft: KB5008212 Windows security update breaks Outlook search

Microsoft has acknowledged an issue triggered by a Windows 10, version 21H2 security update released during the December 2021 Patch Tuesday that causes search issues in Outlook for Microsoft 365.
- Sergiu Gatlan
- January 06, 2022
- 01:51 PM
- 18
Microsoft December 2021 Patch Tuesday fixes 6 zero-days, 67 flaws

Today is Microsoft's December 2021 Patch Tuesday, and with it comes fixes for six zero-day vulnerabilities and a total of 67 flaws. These updates include a fix for an actively exploited Windows Installer vulnerability used in malware distribution campaigns.
- Lawrence Abrams
- December 14, 2021
- 01:41 PM
- 5
Minecraft rushes out patch for critical Log4j vulnerability

Swedish video game developer Mojang Studios has released an emergency Minecraft security update to address a critical bug in the Apache Log4j Java logging library used by the game's Java Edition client and multiplayer servers.
- Sergiu Gatlan
- December 10, 2021
- 11:20 AM
- 0