Follow the cybersecurity developments that matter, explained in about five minutes each weekday.
A booby-trapped file can skip the “downloaded from the internet” warning. CISA wants it patched by Friday....
The attackers went after LAPS passwords and BitLocker keys, and Ivanti’s own integrity checker missed them....
Four critical notes in SAP’s October patch day. None is exploited, and two of them rate 9.9....
The tools that watch your network can be taken over without an account. Fortinet says neither bug is exploited yet....
One update to push today, one VPN to upgrade and check, and two patch lists for this week....
After today’s release, new Server 2012 bugs stay open. Find those boxes and give each one an owner and a…
One fix to install this morning, one release to prepare for this afternoon, and two lists to make....
A bug rated 10 out of 10 lets someone with no account run code on the server through a crafted…
The details won’t be public until about 1 PM ET. Here is what is already known and how to plan…
Hundreds of stores lost chilled stock after Danfoss controllers were hijacked overnight. Thousands more are online....
Four remote-access and backup fixes that piled up over the weekend, in the order we would do them....
Some September builds are still affected when NetScaler does SAML sign-in. The new floor is 14.1-73.46 or 13.1-64.29....
Attackers have been planting web shells on AhsayCBS since October 7. Hotfix 10.3.4.45 is the one that counts....