Vendors/Products

Discover Vendors/Products News

Google Patches Critical Vulnerabilities in Chrome 45

data:image/svg+xml,%3Csvg%20xmlns=%22http://www.w3.org/2000/svg%22%20viewBox=%220%200%20100%20100%22%3E%3C/svg%3E

Tuesday turned out to be a busy day for browser makers. The three major vendors in the space

LinuxSecurity.com Team
Sep 02, 2015

Mozilla Disables Flash in Firefox

As the zero days in Adobe Flash continue to pile up, Mozilla has taken the unusual step of disabling by default all versions of Flash in Firefox.

LinuxSecurity.com Team
Jul 14, 2015

Google fine tunes spam catching tools

Google has reduced spam reaching inboxes to a fraction of a percent, but in the process sometimes misclassifies bulk-mailed messages like monthly statements and ticket receipts. It

LinuxSecurity.com Team
Jul 10, 2015

Firefox 39 Out With Patches for Four Critical Vulnerabilities

Mozilla has rolled out a new version of its Firefox browser, an update that includes patches for four critical security vulnerabilities and several less-severe bugs. IN all, Firefox 39 patches 13 vulnerabilities, including two high-risk bugs and six moderate-level ones. The most dangerous vulnerabilities, however, include a pair of use-after-free bugs in one part of the browser and another in a separate component, as well as a number of memory corruption flaws.

LinuxSecurity.com Team
Jul 09, 2015

Apache Cordova fixes flaw that could cause apps to crash

A fix has been released for a vulnerability in a widely used piece of code in Android devices, which could cause apps to crash or display unwanted dialog boxes.

LinuxSecurity.com Team
May 28, 2015

Ubuntu still vulnerable to time-twiddling hack

A security flaw in a common Unix software component remains unpatched in one of the most popular Linux distributions, more than a year after an official fix was published.

LinuxSecurity.com Team
May 01, 2015

WordPress promises patch for zero-day "within hours"

Shortly after this article was posted, WordPress released version 4.2.1, flagging it as a critical update. Website owners are encouraged to update immediately, and automatic updates have started to roll out. More information is here.

LinuxSecurity.com Team
Apr 29, 2015

WordPress 4.1.2 Fixes Critical XSS Flaw

The maintainers of WordPress announced a new version for the blogging platform, which is considered a critical security release that addresses a highly important cross-site scripting (XSS) vulnerability.

LinuxSecurity.com Team
Apr 22, 2015

Google Shuts Off NPAPI in Chrome

With the release of Chrome 42 this week, Google fixed more than 40 vulnerabilities. But the most significant security change in the new browser is Google

LinuxSecurity.com Team
Apr 20, 2015

What the Ridiculous F$ck, D-Link?!

As mentioned in an update to my post on the HNAP bug in the DIR-890L, the same bug was reported earlier this year in the DIR-645, and a patch was released. D-Link has now released a patch for the DIR-890L as well.

LinuxSecurity.com Team
Apr 15, 2015

PayPal Merchants Can Now Accept Bitcoin

In a long SEC filing from today, PayPal states that its merchants can now begin accepting Bitcoin. As the original text to the filing reads: A merchant can typically open a standard PayPal account and begin accepting payments through PayPal within a few minutes. Most online or mobile merchants can onboard quickly and are not required to invest in new or specialized hardware.

LinuxSecurity.com Team
Apr 13, 2015

MongoDB Patches Remote Denial-of-Service Vulnerability

MongoDB, a popular NoSQL database used in big data and heavy analytics environments, has patched a serious denial-of-service vulnerability that is remotely exploitable.

LinuxSecurity.com Team
Apr 01, 2015

And the prize for LEAST SECURE BROWSER goes to ... Chrome!

More vulnerabilities were discovered in Google Chrome last year than any other piece of core internet software

LinuxSecurity.com Team
Mar 27, 2015

OpenSSL Mystery Patch is No Heartbleed

Hold the logo and the dedicated website; the anticipated high-severity OpenSSL vulnerability is serious, but it

LinuxSecurity.com Team
Mar 25, 2015

Mozilla Pushes Hot Fix to Remove Superfish Cert From Firefox

Mozilla has issued a hot fix for Firefox that removes the Superfish root certificate from the browser

LinuxSecurity.com Team
Mar 03, 2015

Network breaking and entering: Ars tests the Pwn Plug R3

Imagine for a moment the following scenario: you're the manager for a busy bank branch in a major city. You come back from lunch and are told by one of your employees that someone from corporate IT dropped by to check on a reported problem with a branch PC.

LinuxSecurity.com Team
Feb 12, 2015

Memory Corruption Bugs Found in VLC Media Player

There are two memory corruption vulnerabilities in some versions of the VLC open-source media player that can allow an attacker to run arbitrary code on vulnerable machines.

LinuxSecurity.com Team
Jan 21, 2015

Google crashes supposedly secure Aviator browser

A spat between Google and Whitehat Security has erupted after engineers at the search giant revealed dangerous vulnerabilities found in the latter's anti-Google privacy-centric Chrome spin-off browser.

LinuxSecurity.com Team
Jan 12, 2015

Belden buys Tripwire for $710m: Will keep network burglars out of Internet of Things things

Signal transmission firm Belden has agreed to buy security tools firm Tripwire for $710m in cash. The deal, announced Monday, is expected to close in the first quarter of 2015, subject to customary closing conditions.

LinuxSecurity.com Team
Dec 10, 2014

Google Removes SSLv3 Fallback Support From Chrome

Google has released Chrome 39, fixing 42 security vulnerabilities and removing support for the fallback to SSLv3, the component that was the target of the POODLE attack revealed last month.

LinuxSecurity.com Team
Nov 25, 2014

Research Indicates All Linux Vendor Kernels Are Insecure - But There's a Fix!

RHEL 9.4 Improves Security, Tackles Hybrid Cloud Complexity

Ubuntu 24.04 Security Enhancements Analyzed [Updated]