Daily
The Press Corner
A short résumé of each security publication from the daily scan, with the topic and a link to the original. The scan runs every day at 01:15 UTC. If that run misses, the next hourly pass picks it up. Last scan Oct 23, 2026.
English. 46–56 of 56
Critical vulnerabilities take 4.5 months on average to remediate - Help Net Security
Vulnerabilities included in the KEV catalog are highly prevalent and over a third of organizations had at least one in 2023.
CISA, FBI urge developers to patch path traversal bugs before shipping
US Cybersecurity Infrastructure and Security Agency (CISA) and the FBI have issued a joint advisory to developers, urging them to check for path traversal vulnerabilities before shipping a software. "Directory traversal or path traversal vulnerabilities remain a persistent class of defect in software…
April’s Patch Tuesday Brings Record Number of Fixes – Krebs on Security
April’s Patch Tuesday Brings Record Number of Fixes – Krebs on Security
New "GoFetch" Vulnerability in Apple M-Series Chips Leaks Secret Encryption Keys
Researchers uncover "GoFetch" vulnerability in Apple M-series chips, potentially allowing attackers to extract secret cryptographic keys.
Patch Tuesday, March 2024 Edition – Krebs on Security
Patch Tuesday, March 2024 Edition – Krebs on Security
RCE vulnerabilities fixed in SolarWinds enterprise solutions - Help Net Security
SolarWinds updates Access Rights Manager (ARM) and (Orion) Platform to fix vulnerabilities allowing arbitrary code execution.
Fat Patch Tuesday, February 2024 Edition – Krebs on Security
Fat Patch Tuesday, February 2024 Edition – Krebs on Security
Terrapin attack allows to downgrade SSH protocol security
Researchers discovered an SSH vulnerability, called Terrapin, that could allow an attacker to downgrade the connection’s security. Security researchers from Ruhr University Bochum (Fabian Bäumer, Marcus Brinkmann, Jörg Schwenk) discovered a vulnerability, called Terrapin (CVE-2023-48795, CVSS score 5.9), in the…
New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now
Apache warns of a major flaw in Struts 2 web app framework (CVE-2023-50164) that could lead to remote code execution.
Microsoft Patch Tuesday, December 2023 Edition – Krebs on Security
Microsoft Patch Tuesday, December 2023 Edition – Krebs on Security
Microsoft Patch Tuesday, November 2023 Edition – Krebs on Security
Microsoft Patch Tuesday, November 2023 Edition – Krebs on Security