current-activity

OpenSSL has released updates to patch identified vulnerabilities that could potentially allow an attacker to cause a Denial of Service (DoS) condition. The following updates are available: (a) OpenSSL 1.0.2 users should upgrade to 1.0.2a (b) OpenSSL 1.0.1 users should upgrade to 1.0.1m. (c) OpenSSL 1.0.0 users should upgrade to …

Ubuntu has released security updates to address multiple vulnerabilities in php5 affecting Ubuntu 10.04 LTS, 12.04 LTS, 14.04 LTS, and 14.10. The vulnerabilities identified could allow an attacker to cause a denial of service or execute arbitrary code. Users and administrators are encouraged to review Ubuntu Security Notices released and …

Apple has released a security updates for Safari to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to execute arbitrary code or prevent users from discerning a phishing attack on an affected system. The following updates are available:- (a) Safari 8.0.4 for OS X Mountain …

Adobe has released security updates for Flash Player for Windows, Macintosh and Linux. These updates address critical vulnerability that could potentially allow an attacker to take control of the affected system. Affected software versions are:- (a) Adobe Flash Player 16.0.0.305 and earlier versions (b) Adobe Flash Player 13.0.0.269 and earlier …

Apple has released a security updates for OS X, iOS and Apple TV to address multiple vulnerabilities. Exploitation of one of these vulnerabilities may allow an attacker to intercept HTTPS connections between vulnerable clients and servers (Kindly make reference of FREAK Attack) The following updates are available:- Xcode 6.2 for …

Microsoft has released a security bulletin summary for March 2015 to address vulnerabilities in Windows. Exploitation of these vulnerabilities could allow elevation of privilege, disclosure of information, remote code execution, spoofing or security feature bypass. Users and administrators are encouraged to review Microsoft Security Bulletin, MS15-Mar, and apply the necessary …

FREAK (Factoring Attack on RSA-EXPORT Keys) SSL/TLS Vulnerability has been discovered, a weakness in some implementations of SSL/TLS.  It allows an attacker to intercept HTTPS connections between vulnerable clients and servers and force the two to use weakened encryption, which the attacker can break to steal or manipulate sensitive data. …

Samba Vulnerability has been discovered in Linux and UNIX based operating systems. All versions of Samba from 3.5.0 to 4.2.0rc4 are vulnerable to an unexpected code execution in the smbd file server daemon. Updates have been released to address the vulnerability that could allow an attacker to take control of …

SuperFish Vulnerability discovered in Lenovo personal computer pre-installed with SuperFish Visual Discovery Software, SuperFish intercepts HTTP(S) traffic using a self-signed root certificate. These updates address vulnerability that could allow an attacker to read all encrypted web browser traffic (HTTPS), successfully impersonate (spoof) any website, or perform other attacks on the …

Mozilla Security Updates The Mozilla Foundation has release security updates to address multiple vulnerabilities in Firefox, Firefox ESR and Thunderbird. These updates address vulnerabilities that could allow an attacker to obtain sensitive information or execute arbitrary code on an affected system. The following updates are available: . Firefox 36 . …