Security news aggregator

Latest coverage for Patch

Patch management fixes known software flaws before attackers exploit them, reducing intrusion risk; prioritize critical systems and verify deployment.

4 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Patch is a software, firmware, or configuration update that fixes a defect, including a vulnerability an attacker could use to gain access, execute code, escalate privileges, or expose data. Patching reduces the exploitable attack surface across operating systems, applications, network devices, and embedded systems; it does not remove risk from unsupported or misconfigured assets, and updates can sometimes introduce compatibility or availability problems.

Effective patch management starts with an accurate inventory and vulnerability assessment, then prioritizes internet-facing systems, high-impact assets, and flaws known to be exploited. Organizations should test updates where practical, deploy them within defined time limits, verify installation, and retain rollback or compensating controls when immediate patching is unsafe. Monitoring vendor advisories and threat intelligence can identify urgent fixes, while documenting exceptions and coverage supports vulnerability management and audit requirements.

Showing 4 most recent headlines Filtered view
Bank Info Security 1 year, 6 months ago

Fortinet Users See Active Zero-Day Warnings Past and Present

Actively Targeted Zero Day Patched; Warning Issued After Device Configurations LeakFortinet has released patches to fix a zero-day vulnerability being actively exploited by attackers. Separately, researchers are warning customers to review their infrastructure after attackers leaked configuration details - including firewall rules and plaintext VPN passwords - for 15,000 devices.

Bank Info Security 18 Jan 2025, 4:30 a.m. 0-Day Firewalls Fortinet Leak Passwords Patch Research VPN Vulnerability Warning
Bank Info Security 1 year, 6 months ago

Breach Roundup: Microsoft Makes Security Staff Cuts

Also: Intensified Russian Hacking in Ukraine, Spain's Telefónica Confirms BreachThis week, Microsoft laid off security staff and released Patch Tuesday, Russian hackers intensified attacks on Ukraine in 2024, Telefónica confirmed a breach, a Tennessee mortgage leader reported a breach and the Texas AG sued Allstate over driver data collection.

Bank Info Security 17 Jan 2025, 9:30 a.m. Breach Hacking Lawsuit Microsoft Patch Patch Tuesday Russia Spain Ukraine
Bank Info Security 1 year, 6 months ago

Researchers Spot Serious UEFI Secure Boot Bypass Flaw

Attackers Can Employ a Vulnerable Driver to Target Most Windows and Linux SystemsResearchers are warning Microsoft Windows as well as many Linux distribution users to install updates that revoke permissions for a vulnerable driver that attackers can use to target most systems, allowing them to bypass UEFI Secure Boot and install a bootkit to take full control of a system.

Bank Info Security 17 Jan 2025, 4:30 a.m. Bypass Flaw Linux Microsoft Patch Research Vulnerability Warning
Bank Info Security 1 year, 6 months ago

Apple Patches Flaw That Allows Kernel Security Bypassing

Microsoft Uncovered Flaw That Affects macOS System Integrity Protection FeatureApple patched a vulnerability that allows hackers to bypass a key security feature in macOS by through third-party kernel extensions. Microsoft researchers uncovered the flaw tracked as CVE-2024-44243. The flaw could enable hackers to install rootkits and create malware with privileged access.

Bank Info Security 15 Jan 2025, 10:30 a.m. CVE-2024-44243 Apple Bypass CVE Flaw macOS Malware Microsoft Patch Research Vulnerability