Security Leftovers
-
Microsoft Patch Tuesday, February 2023 Edition
Microsoft is sending the world a whole bunch of love today, in the form of patches to plug dozens of security holes in its Windows operating systems and other software. This year's special Valentine's Day Patch Tuesday includes fixes for a whopping three different "zero-day" vulnerabilities that are already being used in active attacks.
-
Serious Security: GnuTLS follows OpenSSL, fixes timing attack bug - Naked Security
Last week, we wrote about a bunch of memory management bugs that were fixed in the latest security update of the popular OpenSSL encryption library.
Along with those memory bugs, we also reported on a bug dubbed CVE-2022-4304: Timing Oracle in RSA Decryption.
-
Password manager security: Which is the right option for me?
The first guide of our two-part series helps consumers choose the best way to manage their login credentials
-
Opscura lands $9.4 million to defend industrial devices
A Spanish company called Opscura said this week that it had raised $9.4 million to defend industrial IoT devices that sit deep within the operational technology network.