Risk Management May 7, 2024

Remote access risks on the rise with CVE-2024-1708 and CVE-2024-1709

4 min read - On February 19, ConnectWise reported two vulnerabilities in its ScreenConnect product, CVE-2024-1708 and 1709. The first is an authentication bypass vulnerability, and the second is a path traversal vulnerability. Both made it possible for attackers to bypass authentication processes and…

November 16, 2017

Security Patches Help IT Managers Address Microsoft Vulnerability

2 min read - Microsoft released security patches to deal with a 17-year-old flaw that could be exploited to remotely initiate malicious code on all Windows versions.

November 2, 2017

WordPress Issues Security Patch to Mitigate SQL Injection

2 min read - With its latest update, WordPress patched a vulnerability that could enable malicious plugin and theme developers to execute SQL injection attacks.

September 27, 2016

OpenSSL Patch Gets Patched

2 min read - The OpenSSL patch issued on Sept. 22 was meant to fix a vulnerability, but it only caused more problems. The Sept. 26 update fixed the outstanding issues.

December 1, 2015

All Patched Up: Software Catches a Break Over Holiday Weekend

2 min read - Lenovo, LinkedIn and Zen Cart addressed serious software flaws during the holiday weekend, but now users can rest assured that vulnerabilities are patched.

January 16, 2015

Google Stops Android Patches for Older Versions, Puts Millions of Smartphone Users at Risk

2 min read - Google has reportedly decided to stop issuing Android patches for older versions of the operating system, putting millions of smartphone users at risk.