Patch/Configuration Management, Vulnerability Management

Adobe releases update for Shockwave vulnerabilities

January 20, 2010

Adobe has issued a "critical" security update for its Shockwave Player, according to an advisory released Tuesday. The update, for both Windows and Mac users, resolves two vulnerabilities that could enable an attacker to run malicious code on victim machines. Users are advised to immediately upgrade to version 11.5.6.606, available for installation here. Shockwave Player is one of the most widely deployed multimedia technologies. — DK

Dan Kaplan

Network Security

CISA: Attacks exploiting F5 BIG-IP cookies underway

SC StaffOctober 14, 2024

Organizations have been warned by the Cybersecurity and Infrastructure Security Agency about ongoing attacks exploiting unencrypted F5 BIG-IP Local Traffic Manager module-managed persistence cookies to discover other devices within the targeted network.

Ransomware

Fog, Akira ransomware groups exploit critical Veeam backup flaw

Steve ZurierOctober 11, 2024

Veeam disclosed the flaw and issued patches in September.

(Credit: Rafael Henrique – stock.adobe.com)

Vulnerability Management

Several serious Palo Alto firewall hijacking vulnerabilities resolved

SC StaffOctober 10, 2024

Most serious of the resolved vulnerabilities was the critical OS command injection issue, tracked as CVE-2024-9463, which could be exploited to expose firewalls' usernames, cleartext passwords, API keys, and configurations.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Adobe releases update for Shockwave vulnerabilities

Related

CISA: Attacks exploiting F5 BIG-IP cookies underway

Fog, Akira ransomware groups exploit critical Veeam backup flaw

Several serious Palo Alto firewall hijacking vulnerabilities resolved

Get daily email updates