Now it’s Office’s turn to have a load of patches pulled
Two patches pulled altogether; another is known to cause crashes but should be used anyway. Continue reading Now it’s Office’s turn to have a load of patches pulled
Category Archives: Updates
What consequences could there be to the continued use of an operating system without updating?
As it is well known, the extended support of Windows 7 (Service Pack 1) ends on January 14, 2020. Due to the short time that remains, I raise this question.
What consequences could an outdated operating system without contin… Continue reading What consequences could there be to the continued use of an operating system without updating?
How do services with high uptime apply patches without rebooting?
How are critical security updates installed on systems which you cannot afford to reboot but the update requires a reboot. For example, services/businesses that are required to run 24×7 with zero downtime, e.g. Amazon.com or … Continue reading How do services with high uptime apply patches without rebooting?
Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?
One of the biggest IPS providers (top of Gartner graph for its category) is not providing SLAs for all the 7+ ranking CVEs published last year. I don’t really understand why would they refuse to provide SLAs for the published… Continue reading Why would IPS vendor provider refuse to publish SLAs to fix the published highly ranked CVEs?
The next Google Chrome Update May Break Your Site
The upcoming version of the Google Chrome web browser will include a new security check labelling old security certificates as non-trusted. This poses a serious issue as many of the top 1 million sites are still using them. Many of…Read more
The post… Continue reading The next Google Chrome Update May Break Your Site
Is it OK to not update devdependencies?
When checking third party libraries used in package.json and build.gradle files with tools such as Snyk, they allow the option to check for devdependencies. A lot of the time there is vulnerabilities for these dependencies. B… Continue reading Is it OK to not update devdependencies?
The VPNFILTER Trojan Has Been Updated With New Advanced Features
The VPNFILFER Trojan has been updated by the developers behind it with new modules that make it an even more dangerous threat. The detailed security analysis shows that in the hands of experienced hackers it can cause significant damage to…Read more
… Continue reading The VPNFILTER Trojan Has Been Updated With New Advanced Features
Can’t update/use Whonix distribution [migrated]
When trying to start “Whonix Gateway” first time, after few starting steps it runs whonixsetup which checks if Whonix is configured successfully within Tor, but it fails with Warning:
So, as mentioned above we’ve tried to … Continue reading Can’t update/use Whonix distribution [migrated]
Risk of infecting the host OS if the guest OS is out of date [duplicate]
This question already has an answer here:
How secure are virtual machines really? False sense of security?
9 answers
I’d … Continue reading Risk of infecting the host OS if the guest OS is out of date [duplicate]
CVE-2018-8440 Zero-Day Fixed in September 2018 Patch Tuesday
September Patch Tuesday 2018 has been released, fixing a total of 62 security vulnerabilities. The fixes include a recently discovered zero-day bug which was exploited in the wild. This vulnerability has been given the CVE-2018-8440 identifier. More ab… Continue reading CVE-2018-8440 Zero-Day Fixed in September 2018 Patch Tuesday