Patch/Configuration Management

The vulnerability — CVE-2023-5129 — was given a critical 10.0 CVSS score by Google and a high-severity 8.8 score by NIST.

Security researchers say the three new zero-days are more than likely commercial spyware vendors exploiting them in the wild.

Here are six ways to get started on a patching program that will help organizations get a handle on the challenges presented by patch management.

Security pros urged to patch zero-day immediately Mozilla's Firefox browser and Thunderbird email client. Google also issued a patch for the vulnerability in Chrome on Monday.

Mopria, Cisco, Seimens and Schneider, Word, AP Stylebook, DarkGate, GitHub, Chrome, More News, and Jason Wood on the Security Weekly News.

AI vs. Hunter Thompson, Sandstorm, BGP, Earth Estries, DOE, VMWare Aria, Key Group, DSA, Aaran Leyland, and More on this edition of the Security Weekly News.

Security teams are encouraged to quickly patch one of the two bugs that is a critical authentication bypass vulnerability.

This month’s Patch Tuesday also saw Microsoft fix a vulnerability it warned last month was being exploited in the wild.