Security News
Post Heartbleed, tech giants join initiative to bolster open source
The newly formed Core Infrastructure Initiative, created to boost under-funded open source projects, will tackle OpenSSL first.
About SC Media
Your search for heartbleed/ returned 17 results
Security News
Heartburn: 200,000 devices ‘still susceptible’ to Heartbleed bug
As the patching cycle becomes ever longer, some experts are pushing for mandatory security updating of critical IoT devices.
Vulnerabilities
Oracle issues emergency patch for JoltandBleed bug in Tuxedo middleware
Oracle Corporation issued an emergency patch on Tuesday, fixing critical vulnerabilities affecting the Jolt server within Oracle Tuxedo that could be exploited over a network with no valid username or password credentials.
Vulnerabilities
Yahoo banishes ImageMagick after version it was using was found vulnerable to data exfiltration
Yahoo has reportedly shelved its use of ImageMagick image processing software after a researcher discovered two vulnerabilities that could be exploited to pull user content in unauthorized fashion from the memory of Yahoo’s private servers. Security researcher Chris Evans, who discovered the vulnerabilities, dubbed them Yahoobleed #1 and Yahoobleed #2, because they evoked memories of…
Security News
BitSight report: half of entities susceptible to SSL vulnerabilities
Security ratings company BitSight Technologies published a rating of the security preparedness of organizations across six industries.
Security News
Third of ICS flaws were unpatched when disclosed – report
Industrial control system vulnerabilities disclosed by security researchers have steadily climbed in the years following the discovery of Stuxnet worm in 2010, according to a report.
Security News
Insiders pose greater threat to businesses than outsiders
The Insider Threat is the most dangerous way to gain inside access to sensitive information.
Security News
Companies leaving known vulnerabilities unchecked for 120 days: Kenna
Most corporations have nobody to blame but themselves when it comes to making themselves open to non-targeted online attacks with the average company leaving known vulnerabilities open for months giving hackers more than enough time to take action, according to a study by Kenna Securities.
Security News
Drupal install process appears to be dripping
Thanks to a broken update procedure, installations of the Drupal CMS appear to be telling users that they are up-to-date despite still using older software.
Security News
Study: 58 percent of businesses do not have complete patch management strategy
Most businesses store and process financial data, yet 63 percent do not have a mature way to control and track sensitive data, Trustwave found.