Patch/Configuration Management

Vulnerabilities impacting the widely used curl open source tool used for various network protocols will be addressed in an update to be issued on Wednesday, reports The Record, a news site by cybersecurity firm Recorded Future.

Security researchers advise patching immediately because once an attacker gains root privileges, they could potentially shut down an emergency response system.

While on the surface it appears that Apple has become a prime target, security researchers say we should focus more on attackers leveraging open source software – code that’s used by many vendors, including Microsoft and Google.

InfoSec World speaker Joshua Kuntz recommends tracking the speed and comprehensiveness of vulnerability management.

Three of six zero-day flaws in the Exim mail transfer agent have been fixed with the release of new security patches, reports BleepingComputer.

Trend Micro’s Zero Day Initiative says Exim zero-days leave organizations open to an remote code execution attack.

Organizations using Progress Software's enterprise-grade WS_FTP Server secure file transfer software have been urged to immediately remediate a maximum severity vulnerability, which has been fixed along with other bugs as part of a security update, reports BleepingComputer.