#patch-management
#patch-management
[ follow ]
fromThe Hacker News
1 week agoBeyondTrust Fixes Critical Pre-Auth RCE Vulnerability in Remote Support and PRA
"BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote code execution vulnerability," the company said in an advisory released February 6, 2026. "By sending specially crafted requests, an unauthenticated remote attacker may be able to execute operating system commands in the context of the site user." The vulnerability, categorized as an operating system command injection, has been assigned the CVE identifier CVE-2026-1731.
Information security
fromTechzine Global
2 weeks agoDevelopers struggle with container security
Almost a quarter of those surveyed said they had experienced a container-related security incident in the past year. The bottleneck is rarely in detecting vulnerabilities, but mainly in what happens next. Weeks or months can pass between the discovery of a problem and the actual implementation of a solution. During that period, applications continued to run with known risks, making organizations vulnerable, reports The Register.
Information security
fromDataBreaches.Net
4 weeks agoOCR's Latest HIPAA Guidance and Common HIPAA Pitfalls - DataBreaches.Net
As Theresa Defino recently reported, HHS OCR will prioritize risk assessments and expand its investigations into risk management in 2026. Alisa Chestler and Layna Cook Rush of Baker Donelson have summarized some recent recommendations from HHS OCR's January 2026 Cybersecurity Newsletter that regulated entities may want to pay increased attention to at this point: Patching Is a Required Risk Management Activity Legacy Systems and Unpatchable Vulnerabilities Are Not Excuses Unnecessary Software and Default Accounts Create Hidden Risk
Healthcare
fromThe Hacker News
1 month agoTrend Micro Apex Central RCE Flaw Scores 9.8 CVSS in On-Prem Windows Versions
"Trend Micro has released security updates to address multiple security vulnerabilities impacting on-premise versions of Apex Central for Windows, including a critical bug that could result in arbitrary code execution. The vulnerability, tracked as CVE-2025-69258, carries a CVSS score of 9.8 out of a maximum of 10.0. The vulnerability has been described as a case of remote code execution affecting LoadLibraryEX."
Information security
fromTechzine Global
1 month agoIBM warns of critical flaw in API Connect
IBM is urging customers to immediately patch a critical vulnerability in API Connect. The flaw allows attackers to access applications without authentication. The leak affects hundreds of organizations in banking, healthcare, and retail. The vulnerability, registered as CVE-2025-13915, scores 9.8 on the CVSS rating. It concerns an authentication bypass flaw in IBM API Connect versions 10.0.11.0 and 10.0.8.0 through 10.0.8.5.
Information security
Tech industry
fromTechzine Global
2 months agoProxmox becomes a stronger VMware alternative with Datacenter Manager 1.0
Proxmox Datacenter Manager centralises oversight and basic management across multiple Proxmox VE and Backup Server clusters, enabling live workload moves and simplified patch management.
Information security
fromComputerworld
2 months agoWhy security needs a step change to thwart cyber attacks amid surging innovation
Enterprises must implement comprehensive vulnerability management—including automated scanning, prompt patching, and scalable penetration testing—to prevent preventable breaches and reduce attack surfaces from AI adoption.
Information security
fromThe Hacker News
3 months agoWhen Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security
Newly disclosed vulnerabilities are frequently weaponized within 48 hours, forcing defenders to outpace automated, AI-enhanced attacker workflows and abandon slow patch cadences.
Information security
fromThe Hacker News
3 months agoThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & More
Digital vulnerabilities now translate into real-world harm as scams, rented cyber violence, and compromised apps turn digital weaknesses into physical, economic, and political threats.
Startup companies
fromTechCrunch
3 months agoCyDeploy wants to create a replica of a company's system to help it test updates before pushing them out - catch it at Disrupt 2025 | TechCrunch
CyDeploy uses machine learning to create digital twins of critical systems for pre-deployment testing, reducing risk and speeding patch rollout without impacting live environments.
fromTheregister
3 months agoMicrosoft issues out-of-band patch for critical WSUS flaw
Microsoft has released an out-of-band update to patch a critical vulnerability in Windows Server Update Services (WSUS). The update addresses CVE-2025-59287">CVE-2025-59287, a remote code execution flaw affecting Windows Server versions 2012 through 2025. The vulnerability stems from insecure deserialization of untrusted data, allowing unauthenticated attackers to execute arbitrary code. A proof-of-concept exploit is publicly available. The vulnerability has been assigned a maximum severity level of "critical". Only servers with the WSUS role enabled are affected.
Information security
Information security
fromSecurityWeek
4 months agoLibraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers
A command-injection vulnerability in Libraesva ESG allows arbitrary shell command execution via crafted compressed email attachments; patches available for ESG 5.x while 4.x is discontinued.
[ Load more ]