Cisco pushed out patches for two products this week, addressing a handful of vulnerabilities in their Firewall Services Module (FWSM) software and their Adaptive Security Appliance (ASA) software.
Google, one of the first companies to offer a significant bug bounty program, is extending its rewards to researchers and developers who contribute patches to a variety of open source projects and have an effect on the security of the project.
Blackberry added to Patch Tuesday’s patches with an update for its BlackBerry Enterprise Service 10 mobile device management product, fixing a remote code execution vulnerability.
Eight bulletins and 28 vulnerabilities, including two Internet Explorer zero days, are addressed by Microsoft’s October Patch Tuesday update.
Adobe released patches and security updates for Adobe Acrobat, Reader and RoboHelp. None of the vulnerabilities are related to the recent Adobe hack and breach of source code and customer records.
Taiwanese electronics company Asus has released an update for one of its routers that corrects an authentication bypass vulnerability discovered in the devices over the summer.
Microsoft has announced that it plans to release eight patches next week as part of October’s Patch Tuesday release, addressing flaws in its Windows, Internet Explorer, .NET Framework, Office, Server and Silverlight software.
Yahoo announced it has revamped its rewards program and will pay out up to $15,000 for high-risk bugs. The announcement comes days after a researcher complained about receiving a $25 discount code as a reward for reporting a handful of vulnerabilities.
Adobe has announced that it plans next week to patch critical vulnerabilities in two products, Adobe Reader and Acrobat XI (11.0.04) for Windows.
Regardless of which sect or splinter cell you belong to in the disclosure debate, for most people it all comes down to finding the most effective way to get a fix published and in the hands of users as quickly as possible. But the lines get a little blurry when the discussion veers into the appropriate moment to tell the public that a given vulnerability is being actively exploited.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
