OpenSSL has patched two vulnerabilities, pivoting from its earlier announcement, in version 3.0.7.
CVE-2021-39144: VMware Patches Critical Cloud Foundation Vulnerability in XStream Open Source LibraryOctober 26, 2022
VMware issues patches for end-of-life versions of Cloud Foundation Network Security Virtualization for vSphere (NSX-V) to address a critical vulnerability in an open source library. Background ...
Oracle addresses 179 CVEs in its fourth and final quarterly update of 2022 with 370 patches, including 56 critical updates.
Microsoft addresses 84 CVEs in its October 2022 Patch Tuesday release, including 13 critical flaws.
CISA, the NSA and FBI issue a joint advisory detailing the top 20 vulnerabilities exploited by state-sponsored threat actors linked to the People’s Republic of China.
Fortinet has patched a critical authentication bypass in its FortiOS and FortiProxy products that could lead to administrator access.
Microsoft has confirmed reports of two zero-day vulnerabilities in Microsoft Exchange Server that have been exploited in the wild. Patches are not yet available.
AA22-257A: Cybersecurity Agencies Issue Joint Advisory on Iranian Islamic Revolutionary Guard Corps-Affiliated AttacksSeptember 15, 2022
Several global cybersecurity agencies publish a joint advisory detailing efforts by Iranian-government sponsored threat actors exploiting vulnerabilities to enable ransomware attacks.
Trend Micro has patched six vulnerabilities in its Apex One on-prem and software-as-a-service products, one of which has been exploited in the wild.
Microsoft addresses 62 CVEs in its September 2022 Patch Tuesday release, including five critical flaws.
As ransomware has cemented itself as one of the biggest cybersecurity threats to companies around the globe, it has become increasingly important that organizations treat ransomware attacks like they would a natural disaster and establish a robust preparedness plan.
Microsoft addresses 118 CVEs in its August 2022 Patch Tuesday release, including 17 critical flaws.