Today, Oracle released their quarterly Critical Patch Update (CPU) for January 2014. CPUs are Oracle's quarterly collections of security updates, which fix vulnerabilities in a wide-range of their products. Oracle publishes their quarterly updates on the Tuesday closest to the 17th of the month, and this quarter that happens to fall on Microsoft and Adobe's Patch … [Read more...]
Hefty Patch Day Despite Light Microsoft Turnout
If any security professionals need quick reminder that the end-of-year holidays are over, and it's time to get back to protecting information, Microsoft's first Patch Day of the year will likely do that for you. However, the good news is Microsoft is giving us a slow start with only four security updates for January. Unfortunately, two other companies, Oracle and Adobe, have … [Read more...]
D-Link Backdoor – WSWiR Episode 81
Hijacked vBulletins, Harvested Email, and Router Backdoors Do you remember the days where we might learn about one, maybe two, big Infosec stories a month? Well those days are long gone. Nowadays, it seems like more network and information security stories break each week than one person could follow. So why not let me do it for you in my weekly Infosec news summary. This … [Read more...]
Oracle Fixes 133 Vulnerabilities with Massive CPU & Java Updates
Yesterday, Oracle released their quarterly Critical Patch Update (CPU) for October 2013. If you haven't heard of them, CPUs are Oracle's quarterly collections of security updates, which fix vulnerabilities in a wide-range of their products. Oracle publishes their quarterly updates on the Tuesday closest to the 17th of the month (in this case, October 15th). Previously, Oracle … [Read more...]