It’s Patch Day

July 15, 2015 mitch tanenbaum Leave a comment

Yesterday was Patch Tuesday. Microsoft had 14 bulletins, 5 of which they deemed critical, covering 59 vulnerabilities. Oracle released patches covering 193 vulnerabilities, including 25 Java patches, one of which is already being exploited in the wild. 44 of these vulnerabilities came from third party components. Of the 25 Java vulnerabilities fixed, 23 of […]

Continue reading → [DISPLAY_ACURAX_ICONS]

Security Practices, Software Development

Why Patching Doesn’t Work – Using Apple As An Example

July 3, 2015 mitch tanenbaum Leave a comment

Apple released patches to fix a family of security flaws called Masque the other day in iOS release 8.4 . Researchers then came up with a new variant of the flaw that the patch doesn’t fix. Apple had fixed earlier variants of the Masque attack in iOS 8.1.3 , Anyone see a theme here. Unfortunately, […]

Continue reading → [DISPLAY_ACURAX_ICONS]