Skip to content

Juniper Networks Patches Critical Third-Party Component Vulnerabilities “How to Make Exercise a Part of Your Regular Routine” “Creating a Consistent Exercise Habit”

Juniper Networks, a networking, cloud and cybersecurity solutions provider, this week released advisories detailing tens of vulnerabilities found across its product portfolio, including critical bugs in third-party components of Junos OS and STRM. One of the advisories addresses multiple critical-severity vulnerabilities in Expat (libexpat), a third-party stream-oriented XML parser library. Juniper’s advisory details 15 Expat… 

Critical Vulnerability in Hikvision Storage Solutions Exposes Video Security Data “5 Ways to Create a Successful Online Business” “Five Strategies for Building a Profitable Online Venture”

Video surveillance giant Hikvision this week informed customers that it has patched a critical vulnerability affecting its Hybrid SAN and cluster storage products. The vulnerability, tracked as CVE-2023-28808, has been described by the vendor as an access control issue that can be exploited to obtain administrator permissions by sending specially crafted messages to the targeted… 

Fortinet Patches Critical Vulnerability in Data Analytics Solution “How to Make the Most of Your Time Management Skills” “Maximizing Your Time Management Abilities”

Fortinet, a cybersecurity solutions provider, this week released security updates to address several high-severity vulnerabilities in multiple products, including a critical missing authentication vulnerability in the FortiPresence infrastructure server. This vulnerability, tracked as CVE-2022-41331, can be exploited by a remote, unauthenticated attacker to gain access to Redis and MongoDB instances. In addition to FortiPresence, Fortinet… 

SAP Patches Critical Vulnerabilities in Diagnostics Agent, BusinessObjects “Exploring the Benefits of Eating Healthily” “Discovering the Advantages of a Nutritious Diet”

SAP, the German company known for its enterprise software, has recently revealed the launch of 19 brand new notes during its April 2023 Security Patch Day. Additionally, they have also provided five updates to previously issued notes. The 24 notes included in SAP’s security updates (PDF) consist of five ‘hot news’ notes, the highest severity… 

Most Attack Paths Are Dead Ends, but 2% Lead to Critical Assets: Report “How to Make a Delicious Banana Smoothie” “Creating a Tasty Banana Smoothie”

Due to encountered difficulties, the request cannot be processed. Organizations are currently experiencing a significant hurdle in terms of managing security posture. In fact, research conducted in 2022 revealed that only 2% of attack paths result in access to critical assets. Therefore, it is crucial to prioritize securing these critical points, as it can greatly… 

Sophos Patches Critical Code Execution Vulnerability in Web Security Appliance “How to Improve Your Writing Skills” “Boosting Your Writing Abilities”

This week, Sophos announced security updates that address several vulnerabilities in its Sophos Web Appliance. The most serious of these is a critical bug that could lead to code execution. Sophos Web Appliance is a web security solution that enables administrators to create, enforce and manage web access policies from a single interface. According to… 

Android’s April 2023 Updates Patch Critical Remote Code Execution Vulnerabilities “How to Make a Delicious Home-Cooked Meal” “Creating a Tasty Home-Prepared Dish”

Google has recently revealed the security updates for Android devices scheduled for April 2023, addressing over 65 vulnerabilities and including fixes for two critical bugs that could potentially lead to remote code execution (RCE). The first part of the security update, delivered as the 2023-04-01 security patch level, addresses 26 vulnerabilities within the Framework and… 

Critical WooCommerce Payments Vulnerability Leads to Site Takeover “The Benefits of Regular Exercise” “Reaping the Rewards of Frequent Physical Activity”

WordPress websites running the open-source WooCommerce Payments plugin are facing a critical vulnerability that could allow attackers to gain control of an administrator’s account and take over the site. Developed by Automattic and installed on more than 500,000 websites, WooCommerce Payments is a fully integrated payment solution for WooCommerce that provides transaction management directly from…