Posts for category: Vulnerability Research

Vulnerabilities Weekly Summary Ending July 1

This past week, IBM, Cisco and Symantec announced security bulletins/advisors disclosing vulnerabilities that affected their products. IBM announced a security bulletins addressing two ...

Vulnerabilities Weekly Summary Ending June 24

This past week  Apple released a firmware patch for their Airport Base Station and WordPress released version 4.5.3 which addressed several security vulnerabilities. Cisco also announced advisories ...

Vulnerabilities Weekly Summary Ending June 17

This week Microsoft and Adobe released their security updates for patch Tuesday, which addresses many vulnerabilities. vCenter also released an update for one vulnerability. Microsoft released ...

Vulnerabilities Weekly Summary Ending June 10

This week vulnerabilities were addressed in security updates for Mozilla's Firefox and Symantec's Embedded Security: Critical System Protection and Data Center Security: Server Advanced. The ...

Building a Vulnerability/Malware Test Lab

Introduction A good way to understand how malicious software works is to drop the malware in a controlled environment, a vulnerability or malware test lab that you can infect to observe and ...

Vulnerabilities Weekly Summary Ending June 3

Vulnerabilities were found and addressed in industrial devices from two different companies, Moxa's Secure Router and Siemens SIPROTEC devices.  Cisco also announced security advisories fixing ...

Vulnerabilities Weekly Summary Ending May 27

This past week vulnerabilities were announced affecting Wordpress and PHP.  Wordpress mostly suffered from XSS vulnerabilities and the PHP vulnerabilities mostly caused denial of service.  In ...

Vulnerabilities Weekly Summary Ending May 20

This week there were many vulnerabilities that were announced and patched for Apple's operating systems, some of the more critical vulnerabilities that were patched could impact kernel ...

Vulnerabilities Weekly Summary Ending May 13

Microsoft released their Security Bulletin Summary for the month of May 2016 patching vulnerabilities that affect the Windows operation system family (“Microsoft Security Bulletin Summary for May ...

Vulnerabilities Weekly Summary Ending May 6

ImageMagick is a bitmap image package commonly used by web services to process images.  It suffers from a vulnerability (CVE-2016-3714). ImageMagick allows to process files with external libraries. ...