Patch Management Software

New attack methods can ‘brick’ systems, defeat Secure Boot, researchers say

Security researchers from Mitre found new ways to defeat the Secure Boot feature in UEFI and install boot-level rootkits

Microsoft will patch IE zero day but doesn’t give timeline

Attackers are probably trying to develop exploit code, the CTO of Qualys says

Safari 6.1.4 and 7.0.4 address critical flaws, iOS patches missing

Apple patched 22 vulnerabilities in Safari, the majority of which could allow remote code execution

Silverlight malvertising exploits on the rise

The Angler exploit kit favors Silverlight and Flash exploits over Java, researchers from Cisco said

Home routers: Broken windows to the world

Microsoft’s .NET Framework security updates further effort to phase out RC4 encryption

The company advises customers to stop using the RC4 cipher in TLS connections because of known weaknesses in the algorithm

Adobe patches critical flaws in Reader, Acrobat, Flash Player and Illustrator

All of the security updates address remote code execution vulnerabilities

Heartbleed’s silver lining

The security flaw got more consumers to change their passwords and start using two-factor authentication

Adobe patches actively exploited vulnerability in Flash Player

The vulnerability was used in attacks against users in Syria, but will likely see wider exploitation, Kaspersky Lab researchers said

Emergency update for Apache Struts fixes incomplete patch for critical flaw

The previous patch did not block an attack vector that could lead to remote code execution in certain environments