Patches

IE Is Focus of Microsoft's May Patch Tuesday

Microsoft issues 10 security bulletins, including critical IE flaws, in May security patch.

15.3 Percent of US PCs Have Unpatched Operating Systems

The information comes from a series of Secunia Country Reports based on data from the company's Personal Software Inspector.

Oracle Secures Java with 41 Updates, Code Signing

Oracle nails Pwn2own flaws and expands its people and technology effort to make Java more secure.

Microsoft Skips Pwn2Own IE Flaws in April Patch Tuesday

Microsoft fixes 14 CVEs in April Patch Tuesday, but outstanding issues remain, including a vulnerability demonstrated at last month's Pwn2Own event.

PostgreSQL Updates Patch Major Security Flaw

The organization says this is the first security issue of this magnitude since 2006.

Microsoft Patch Tues Misses Pwn2own Flaws

Microsoft fixes "evil maid" flaw but lets others that have been publicly demonstrated remain for now.

Oracle Patches Java for McRat

Java 7 update 17 fixes two flaws, as researchers warn that even more vulnerabilities remain unpatched.

Adobe Issues Yet Another Flash Update

The update patches flaws that could allow an attacker to take control of the affected system.

Oracle Patches Another Five Java Vulnerabilities

The five flaws that remained unpatched until today included the vulnerability behind the "Lucky Thirteen" SSL cryptographic timing attack.

Microsoft Tackles 57 Vulnerabilities in February Patch Tuesday

Internet Explorer and Windows Kernel-Mode driver vulnerabilities top the list in Microsoft's Patch Tuesday for February 2013.

VMware Patches Security Flaw in ESX, Workstation, Fusion and View

Derek Soeder of Cylance and Kostya Kortchinsky of Microsoft are credited with uncovering the vulnerability.

Adobe Releases Emergency Patch for Two Zero-Day Flash Vulnerabilities

Both flaws are currently being exploited in the wild.

Oracle Responds to Java Security Flaws with 50 Fixes

Oracle issues massive update to secure Java.

Ruby on Rails Patched Again

It's the third security update this month for the open source Web framework.

Patch Monday? Oracle and Microsoft Scramble IT Patch Cycle

Out-of-band updates from Microsoft and Oracle address critical zero-day flaws.

Did Microsoft Improve Security in 2012?

Microsoft had a lower patch count and fewer vulnerabilities this year, but there were still a few interesting security flaws.

Microsoft's December Patch Tuesday Fixes IE

No gifts for attackers this year, as Microsoft ups the ante on security with December Patch Tuesday.

Microsoft Updates Windows 8 in November Patch Tuesday Release

While Windows 8 raises the bar on Windows security, it's not immune from Microsoft's monthly patch cycle.

Adobe Patches Shockwave Security Flaws

The company says the vulnerabilities could allow an attacker to run malicious code on an affected system.

October Patch Tuesday: Microsoft Enforces 1024-bit RSA Keys

Microsoft releases seven bulletins addressing 20 security issues in Windows, SQL Server and Office.

Cisco Patches Eight IOS Security Flaws

...and one vulnerability in the Cisco Unified Communications Manager.

IBM: SQL Injection Vulnerabilities on Decline

Bad news: 2012 could be a record year for new security vulnerabilities. Good news: SQL injection, one of the most common issues, is finally leveling off.

Apple Fixes 163 Flaws in iTunes

Apple's massive iTunes update tackles security flaws that have been known for over six months.

Microsoft Fixes Measly 2 Flaws for September Patch Tuesday

With one of the lightest security patches in months, some security researchers wonder if Microsoft is leaving some bugs unpatched.

New Java Security Update Contains Security Flaw

The vulnerability could be exploited to execute arbitrary code, according to Security Explorations.