April 07, 2020 Flexera – Patch Automation Capability Now Available in Software Vulnerability Manager
Flexera is leveraging artificial intelligence (AI) to offer patch automation capability within its Software Vulnerability Manager (SVM) product.
March 17, 2020 Windows 7 End-of-Life Troubles Continue: ESUs Don’t Apply to Enterprises That Purchased Licences
Microsoft’s end-of-life support for Windows 7 has run into its first set of issues with its extended security updates (ESUs). Administrators who paid for the ESU found out their downloads are not applying.
March 11, 2020 Qualys Discovers Critical Flaw With OpenBSD Mail Server, Multiple Programs Vulnerable
Qualys Research Labs, a vulnerability management provider, discovered a vulnerability in the OpenSMTPD Mail server used in conjunction with the OpenBSD operating system. This flaw allows for an attacker to execute arbitrary code with command privileges.
March 03, 2020 United Nations Faces Cyber-Espionage; Failure to Patch Causes Breach
A leaked UN report showed that servers were compromised during a cyberattack that exploited an older version of Microsoft SharePoint. This breach is a case study in the importance of both patch management and transparency.
February 24, 2020 Microsoft Troubles Continue; Zero-Day Vulnerability Places Windows Users at Risk
Reported by Microsoft on January 17, the company admitted to another vulnerability in the older versions of its Windows products. A vulnerability in the remote code execution (RCE) was found in the scripting engine of Internet Explorer (IE).
February 24, 2020 Windows 7 Reaches End of Life; Are You About to Pay the Price?
Last fall, Microsoft announced that it would be ending support for Windows 7 on January 14, 2020.
February 04, 2020 Citrix Systems Remain Vulnerable Despite Patching Attempts
A Citrix vulnerability first discovered on December 17, 2019 is being continually exploited by ransomware attackers despite patching attempts by Citrix.
February 04, 2020 Project Zero Extends Its Vulnerability Disclosure Agreement to 90 Days, Changes to Follow
Project Zero is changing its vulnerability disclosure policy to give software developers more time to patch vulnerabilities. The policy is now shifted to a stringent 90-day policy.
January 30, 2020 Bishop Fox Discovers Eight Vulnerabilities in ConnectWise: Patching a Managed Service Provider
Cybersecurity firm Bishop Fox identified eight vulnerabilities in ConnectWise’s remote control and remote access software.
January 30, 2020 Department of Defense Seeks Improved Patch Management Tech: Why You Should Care
On January 15, 2020, the Department of Defense (DoD) issued an open call to vendors to fulfill a contract to help improve their technology and inventory management.
January 28, 2020 Windows 10 Security Flaw Discovered; Millions of Devices at Risk
On January 14, Microsoft issued a statement acknowledging a crucial security flaw within its Windows 10 operating systems: a failure in the Windows 10 CryptoAPI service that affects both Windows 10 and Windows Server Update systems.
January 22, 2020 Ivanti Changes Direction: It Has Installed New Leadership With Experience in Enterprise Software, Mergers & Acquisitions
Clearlake Capital is shaking up Ivanti’s leadership. Expect greater focus on efficiency and acquisitions beyond ITSM and IT operations.
April 05, 2019 The Latest Microsoft AI Power Play
Microsoft is releasing free online courses for artificial intelligence. This is its attempt at remaining relevant in the AI space, so you might as well take advantage.