Critical Infrastructure Security, Patch/Configuration Management, Vulnerability Management

Apple releases mammoth iTunes update

October 11, 2011

Apple on Tuesday released an update to its iTunes software to repair a whopping 79 vulnerabilities. Most of the flaws are memory corruption issues found in WebKit, an open source web browser engine that helps render the iTunes Store. In the case of those bugs, adversaries could launch a man-in-middle attack while a user browses the store, which may lead to malicious code execution. The other holes patched by upgrading to iTunes 10.5 lie in CoreFoundation, ColorSync, CoreAudio, CoreMedia and ImageIO.

Dan Kaplan

Supply chain

Supply chain attack compromises Solana Web3.js library

SC StaffDecember 6, 2024

Impacted by the attack were versions 1.95.6 and 1.95.7 of the library, which were downloadable through for nearly five hours on Dec. 2 before being removed, noted Solana Web3.js maintainers.

Threat Intelligence

Salt Typhoon hack assessment imminent, says Easterly

SC StaffDecember 5, 2024

"We wanted to make sure we did it before the holidays, so we could start writing out how we think about the problem, and then ultimately, what are the key recommendations that we need to bring forward to enable us to strengthen the security of the telecommunications networks going forward," said Easterly.

Water treatment plants of the Waterworks in Thailand.

Critical Infrastructure Security

Indiana’s free cybersecurity evaluation program expands to cover water systems

SC StaffDecember 4, 2024

Water and wastewater treatment facilities across the state have been urged to avail of the assessments, which leverage National Institute of Standards and Technology, Center for Internet Security, and National Science Foundation's Trusted CI frameworks.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

Bug Buffer Overflow Disassembly