Security news aggregator

Latest coverage for Security Update

Security updates fix software weaknesses, reduce exploitable risk, and may address vulnerabilities affecting systems, applications, and devices.

3 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Security updates are vendor-released patches, fixes, or configuration changes that address vulnerabilities and other weaknesses in operating systems, applications, libraries, firmware, cloud services, and network equipment. They may correct exploitable code, tighten security controls, or provide mitigations when a complete fix is not yet available.

For security practitioners, update news informs vulnerability management: assess whether affected assets are deployed, determine exposure and exploitability, prioritize urgent fixes, and verify installation. Applying updates can reduce attack paths such as remote code execution or privilege escalation, but rushed changes can disrupt services, so testing, staged deployment, rollback plans, and compensating controls may be needed. Advisories can also reveal required configuration changes, affected dependencies, or unsupported versions that need replacement.

Volume over time

Weekly headline count for the current query.

Showing 3 most recent headlines Filtered view
Bank Info Security 1 year, 6 months ago

Could HIPAA Security Update Mean Bigger Lawsuit Payouts?

Experts Expect Breach Lawsuits to Multiply, Bolstered by New Compliance StandardsTampa General Hospital has agreed to pay $6.8 million to settle a consolidated proposed federal class action lawsuit filed in a the wake of a 2023 data theft incident affecting about 2.1 million people. How might a potential update to the HIPAA Security Rule affect similar lawsuits moving forward?

Bank Info Security 11 Jan 2025, 10:30 a.m. Breach Compliance Healthcare Incident Lawsuit Proposal Security Update Theft
Bank Info Security 2 years, 1 month ago

Zyxel Releases Emergency Security Update for NAS Devices

Company Addresses Flaws in End-of-Life NAS DevicesNetworking solutions vendor Zyxel fixed critical vulnerabilities in end-of-life network-attached storage devices that allow remote code execution. It left two vulnerabilities allowing attacks by authenticated local attackers unpatched.

Bank Info Security 6 Jun 2024, 11:30 a.m. End of Life Fixed Flaw Remote Code Execution Security Update Vendor Vulnerability Zyxel
Bank Info Security 2 years, 4 months ago

Apple Fixes iOS Kernel Zero-Days Being Exploited in the Wild

Real-World Scenarios Are Sketchy But Researchers Warn: 'Assume Spyware; Update Now'Apple pushed out an emergency security update for two critical zero-day flaws that attackers are using to carry out memory corruption attacks on iPhone and iPad devices. The tech giant's latest patch addressed its third zero-day vulnerability this year.

Bank Info Security 7 Mar 2024, 11:30 a.m. 0-Day Apple Flaw Patch Research Security Update Spyware Vulnerability