Category Archives: zdi

Microsoft Patch Tuesday, May 2021 Edition

Posted on by

Microsoft today released fixes to plug at least 55 security holes in its Windows operating systems and other software. Four of these weaknesses can be exploited by malware and malcontents to seize complete, remote control over vulnerable systems without any help from users. On deck this month are patches to quash a wormable flaw, a creepy wireless bug, and yet another reason to call for the death of Microsoft’s Internet Explorer (IE) web browser. Continue reading Microsoft Patch Tuesday, May 2021 Edition→

Vulnerability Disclosure: Ethical Hackers Seek Best Practices

Posted on by

Cybersecurity researchers Brian Gorenc and Dustin Childs talk about the biggest vulnerability disclosure challenges in IoT and the industrial vertical. Continue reading Vulnerability Disclosure: Ethical Hackers Seek Best Practices→

US-CERT to Windows Users: Dump Apple Quicktime

Posted on by

Microsoft Windows users who still have Apple Quicktime installed should ditch the program now that Apple has stopped shipping security updates for the platform, warns the Department of Homeland Security’s U.S. Computer Emergency Readiness Team (US-CERT). The advice came just as researchers are reporting two new critical security holes in Quicktime that likely won’t be patched. Continue reading US-CERT to Windows Users: Dump Apple Quicktime→

Apple Deprecates QuickTime For Windows, Won’t Patch New Flaws

Posted on by

The Zero Day Initiative has publicly disclosed a pair of serious vulnerabilities in Apple QuickTime for Windows that will not be patched because Apple is deprecating the product. Continue reading Apple Deprecates QuickTime For Windows, Won’t Patch New Flaws→