Patch/Configuration Management

Security researchers advise patching immediately because once an attacker gains root privileges, they could potentially shut down an emergency response system.

While on the surface it appears that Apple has become a prime target, security researchers say we should focus more on attackers leveraging open source software – code that’s used by many vendors, including Microsoft and Google.

InfoSec World speaker Joshua Kuntz recommends tracking the speed and comprehensiveness of vulnerability management.

Three of six zero-day flaws in the Exim mail transfer agent have been fixed with the release of new security patches, reports BleepingComputer.

Trend Micro’s Zero Day Initiative says Exim zero-days leave organizations open to an remote code execution attack.

Organizations using Progress Software's enterprise-grade WS_FTP Server secure file transfer software have been urged to immediately remediate a maximum severity vulnerability, which has been fixed along with other bugs as part of a security update, reports BleepingComputer.

Google's most recent patch for Chrome is the fifth actively exploited zero-day targeted by threat actors this year in the popular browser.