2019

Apple security updates for iOS 13.3, macOS Catalina 10.15.2 and other products

Apple has released security updates for iOS 13.3 and macOS Catalina 10.15.2, as well as other products to include Safari, watchOS, tvOS, iTunes, iCloud and Xcode.

Apple security updates for iOS 13.3, macOS Catalina 10.15.2 and other products Read More »

Microsoft December 2019 Security Updates (includes fix for one active exploit)

Microsoft issued the December 2019 Security Updates that include 36 unique vulnerability fixes, 7 of those rated critical and 29 rated important. One of the patches addresses a Win32k vulnerability under active attack in the wild.

Microsoft December 2019 Security Updates (includes fix for one active exploit) Read More »

ROCA attack and TPM vulnerability impacts Windows Hello for Business

Microsoft has issued a security advisory for vulnerability CVE-2017-15361 that impacts certain Trusted Platform Module (TPM) chipsets and used for Windows Hello for Business. The company issued steps to detect and mitigate the issue.

ROCA attack and TPM vulnerability impacts Windows Hello for Business Read More »

Attackers reverse Outlook vulnerability CVE-2017-11774 patch functionality

Researchers at FireEye have spotted an uptick in active exploits of CVE-2017-11774, an Outlook security feature bypass vulnerability. Attackers are also actively reversing Outlook vulnerability patch functionality. To help protect against such exploits, FireEye has provided Outlook hardening guidelines.

Attackers reverse Outlook vulnerability CVE-2017-11774 patch functionality Read More »

StrandHogg Android vulnerability under active attack by dozens of malicious apps

Security researchers have discovered a dangerous Android vulnerability dubbed “StrandHogg” under active attack by dozens of malicious apps. To add, 500 of the most popular apps may also be vulnerable to the StrandHogg vulnerability.

StrandHogg Android vulnerability under active attack by dozens of malicious apps Read More »