Naked Security
4 years ago
Apache “Commons Configuration” toolkit patches Log4Shell-like bug
It's a bit like Log4J, but for configuration files, not for logging.
Security news aggregator
Latest coverage for Patch
Patch management fixes known software flaws before attackers exploit them, reducing intrusion risk; prioritize critical systems and verify deployment.
10
headlines in this view
Refine the feed
Search across headline titles and summaries.
Tag briefing
Background for this topic.
Patch is a software, firmware, or configuration update that fixes a defect, including a vulnerability an attacker could use to gain access, execute code, escalate privileges, or expose data. Patching reduces the exploitable attack surface across operating systems, applications, network devices, and embedded systems; it does not remove risk from unsupported or misconfigured assets, and updates can sometimes introduce compatibility or availability problems.
Effective patch management starts with an accurate inventory and vulnerability assessment, then prioritizes internet-facing systems, high-impact assets, and flaws known to be exploited. Organizations should test updates where practical, deploy them within defined time limits, verify installation, and retain rollback or compensating controls when immediate patching is unsafe. Monitoring vendor advisories and threat intelligence can identify urgent fixes, while documenting exceptions and coverage supports vulnerability management and audit requirements.
Showing 10 most recent headlines
Filtered view
Info Security Magazine
4 years ago
Cisco Releases 10 Security Patches For Expressway Series and TelePresence VCS Products
There are no workarounds that can be used to address the flaws, so updating systems is paramount
The Hacker News
4 years ago
Cisco and Fortinet Release Security Patches for Multiple Products
Cisco on Wednesday rolled out patches for 10 security flaws spanning multiple products, one of which is rated Critical in severity and could be weaponized to conduct absolute path traversal attacks
The Hacker News
4 years ago
OpenSSL Releases Patch for High-Severity Bug that Could Lead to RCE Attacks
The maintainers of the OpenSSL project have released patches to address a high-severity bug in the cryptographic library that could potentially lead to remote code execution under certain scenarios
Info Security Magazine
4 years ago
Google Patches Chrome Zero Day Under Attack
Rapid fix for vulnerability being exploited in the wild
Naked Security
4 years ago
Google patches “in-the-wild” Chrome zero-day – update now!
Running Chrome? Do the "Help-About-Update" dance move right now, just to be sure...
Threat Post
4 years ago
Google Patches Actively Exploited Chrome Bug
The heap buffer overflow issue in the browser’s WebRTC engine could allow attackers to execute arbitrary code.
The Hacker News
4 years ago
Update Google Chrome Browser to Patch New Zero-Day Exploit Detected in the Wild
Google on Monday shipped security updates to address a high-severity zero-day vulnerability in its Chrome web browser that it said is being exploited in the wild
Bleeping Computer
4 years ago
Google patches new Chrome zero-day flaw exploited in attacks
Google has released Chrome 103.0.5060.114 for Windows users to address a high-severity zero-day vulnerability exploited by attackers in the wild, the fourth Chrome zero-day patched in 2022. [...]
Bleeping Computer
4 years ago
Django fixes SQL Injection vulnerability in new releases
Django, an open source Python-based web framework has patched a high severity vulnerability in its latest releases. Tracked as CVE-2022-34265, the potential SQL Injection vulnerability impacts Django's main branch, and versions 4.1 (currently in beta), 4.0, and 3.2, with patches and new releases issued fixing the vulnerability. [...]