SolarWinds issues third patch for critical bug
What happened: SolarWinds released a third update to fix a serious remote code execution flaw in its Web Help Desk software.
What to do: Make sure your SolarWinds Web Help Desk is fully updated with the latest patch.Federal agency hacked via GeoServer exploit
What happened: Hackers breached a U.S. federal agency by exploiting an unpatched GeoServer vulnerability.
What to do: Check and update any GeoServer installations immediately to avoid similar breaches.Boyd Gaming reports data breach
What happened: A cyberattack on Boyd Gaming led to stolen employee and customer data.
What to do: If you’re a customer or employee, watch for unusual account activity and update passwords.Windows Registry vulnerabilities explored
What happened: Researchers detailed new ways attackers can exploit Windows Registry memory flaws.
What to do: Keep Windows systems updated and monitor for unusual behavior related to registry changes.NSO BLASTPASS iMessage exploit analyzed
What happened: Experts revealed how the BLASTPASS exploit bypasses security in iMessage using WebP image flaws.
What to do: Update your iPhone and messaging apps regularly to get the latest security fixes.CoreAudio fuzzing uncovers sound system bugs
What happened: Security researchers found vulnerabilities in Apple’s CoreAudio by testing Mach message handling.
What to do: Keep Apple devices updated and be cautious with audio files from unknown sources.SolarWinds vulnerability patch bypasses continue
What happened: New patches address bypasses of previous SolarWinds security fixes, showing attackers keep adapting.
What to do: Apply all recommended patches promptly and monitor systems for suspicious activity.
If You Only Do 3 Things Today
| Action (1 minute each) | Why it matters |
|---|---|
| Update SolarWinds Web Help Desk software | Prevent attackers from running harmful code |
| Patch or remove any GeoServer installations | Stop hackers from exploiting known flaws |
| Change passwords and watch accounts for alerts | Protect your personal and work data |
For Teams (super quick)
- Verify all SolarWinds Web Help Desk instances are on the latest patch.
- Audit GeoServer usage and ensure no unpatched versions remain in your network.
- Monitor logs for unusual remote code execution attempts or registry modifications.
- Remind users to report suspicious emails or messages, especially with attachments.
- Review incident response plans for data breach scenarios and update as needed.
Photo by Jakub Żerdzicki on Unsplash