Patch/Configuration Management

Security pros say this news demonstrates how old bugs can do extensive damage if left unpatched.

SecurityWeek reports that numerous security vulnerabilities impacting Mozilla Firefox and Thunderbird have been addressed in new updates.

Security pros say while it’s unfortunate Google found another zero-day, the company released a patch within a day.

Comcast says usernames, hashed passwords and other info were stolen between Oct. 16 and Oct. 19.

Research highlights how organizations have little time to patch high-risk bugs.

Apache releases drop-in replacement and upgrade for critical security flaw that is similar to vulnerability that led to 2017 Equifax breach.

In addition to Log4j, the North Korean threat group’s latest campaign also involves three previously unknown Dlang-based malware variants.