Skip to main content

Patch Tuesday

Breathe easy knowing we've got you covered with Patch Tuesday news and remediation recommendations every month!

  • 232 Topics
  • 231 Replies
232 Topics
RichardM-Automox
RichardM-AutomoxFormer Automox Employee
posted in Patch Tuesday
Kasper-Spy: Kaspersky Anti-Virus puts users at risk

A super interesting read on the failure of Kasperky to protect the data of their users from leaking out, revealing user’s web browsing for years. If you are a user, the vulnerability is filed under CVE-2019-8286. Read the report here: https://www.heise.de/ct/artikel/Kasper-Spy-Kaspersky-Anti-Virus-puts-users-at-risk-4496138.html

533
RichardM-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Patch Tuesday
Patch Tuesday roundup from KrebsOnSecurity

https://krebsonsecurity.com/2019/08/patch-tuesday-august-2019-edition/ More RDP vulnerabilities - we do have a worklet for turning that off, in case you haven’t already: Worklet: How to Disable Remote Desktop Protocol Connection Worklets Here’s an example of a worklet we recently created in response to managing updates for the BlueKeep vulnerability: Introducing the Automox Worklet To enable your ability to configure and update systems using the Automox platform, we’ve created an endpoint hardening worklet that disables the remote desktop protocol connection. An Automox worklet is an open extensible automation architecture that allows IT operations to create any custom task that they can imagine. Our tool consumes and contain…

592
Nic-Automox
Stan-Overwatch
Stan-OverwatchChannel Partner
posted in Patch Tuesday
Biometrics Flaws Uncovered To Bypass Apple FaceID

threatpost.com Biometrics Flaws Uncovered To Bypass Apple FaceID Researchers were able to bypass Apple's FaceID using a pair of glasses with tape on the lenses.

698
Holly
Holly
HollyFormer Automox Employee
posted in Patch Tuesday
What are your trusted sources for industry info?

What are your most trusted sources of info to support your role? For instance, which sites, podcasts or newsletters do you visit regularly?

7611
Nic-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Patch Tuesday
Ransomware on your camera

The Verge – 11 Aug 19 Security researchers find that DSLR cameras are vulnerable to ransomware attack Canon has issued a security advisory and firmware patch for the vulnerability Looks like it’s a remote exploit, so watch out what Wifi you connect your Canon to until you’ve updated your camera. It would suck to have your images encrypted before you even get to download them to a safe location.

310
Nic-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Patch Tuesday
With warshipping, hackers ship their exploits directly to their target’s mail room

TechCrunch With warshipping, hackers ship their exploits directly to their target’s mail... Why break into a company’s network when you can just walk right in — literally? Gone could be the days of having to find a zero-day vulnerability in a target’s website, or having to scramble for breached usernames and passwords to break through a... Do any of you take any security measures against packages delivered to your office?

370
Nic-Automox
Nic-Automox
Nic-AutomoxFormer Automox Employee
posted in Patch Tuesday
Honda Motors Company databases leaked 40GB of employee data

https://www.scmagazine.com/home/security-news/data-breach/independent-researcher-xxdesmus-discovered-a-honda-motor-company-database-leaking-the-computer-data-of-134-million-rows-roughly-40gb-of-employee-information/ Looks like it’s mostly information about their computer endpoints, but that can still give hackers info they can use to try to break in using known vulnerabilities. Especially targeting the endpoints that don’t have their security software installed.

320
Nic-Automox
Terms & ConditionsCookie settings