Update 10/6/2022 : Microsoft has released several updates since their post on the “ProxyNotShell” Exchange vulnerabilities. If you followed their initial mitigation steps, they are not sufficient to block this threat and your Exchange server may remain vulnerable. Security researchers began poking at the initial mitigation recommendations and found ways to bypass their … [Read more...]
Glibc Helps Hackers Pop Linux – Daily Security Byte EP. 217
Glibc is the standard C library that ships with mosts version of Linux. It includes many functions that handle the common tasks programs might need, such as looking up IP addresses associated with domain names. This week, Google and Red Hat researchers disclosed a serious vulnerability in this common library, which could allow remote attackers to execute code on your Linux … [Read more...]
A Dozen Microsoft Updates – Daily Security Byte EP. 174
If you use Microsoft or Adobe products—as the majority of computer users do—it's that time again... Patch Day. For November's Patch Day, Microsoft released a dozen bulletins fixing many flaws in their most popular products. Watch today's video for the quick highlights about these and Adobe's updates. UPDATE: As gung-ho as I am about applying patches quickly, there have been … [Read more...]
Lenovo Security Fail – Daily Security Byte EP.78
A few months ago, some of Lenovo's preinstalled adware got them into security hot water. Looks like their pre-installed software has struck again. Watch today's video to learn about the latest Lenovo vulnerabilities and what you can do about them. (Episode Runtime: 1:54) Direct YouTube Link: https://www.youtube.com/watch?v=2jU2b42iVY4 EPISODE REFERENCES: Security advisory … [Read more...]
Latest Flash Update Plugs 18 Security Holes
Do you watch a lot of online video or play interactive web games? Perhaps your organization uses rich, interactive web-based business applications? In either case, you've probably installed Adobe Flash, along with the 500 million other device holders who use it. In this case, you better update Flash as soon as you can. During Microsoft Patch day, Adobe released a security … [Read more...]