NewsCisco Talos
Anstieg der Schwachstellenzahlen: Ursachen und Ausblick
Teaser aus der Quelle
Der September-Patchday von Microsoft umfasste 975 Schwachstellenmeldungen, im Oktober stieg die Zahl auf 1.415. Im Vergleich zu einem Durchschnitt von 100 Schwachstellen pro Monat vor Juni ist dies ein erheblicher Anstieg. Die Ursachen und die zukünftige Entwicklung dieser Entwicklung werden untersucht.
Dies ist ein Anriss aus dem RSS-Feed. Den vollständigen Artikel lesen Sie beim Original.
Artikel bei Cisco Talos lesenVerknüpfte Advisories
- CVE-2021-44228[UPDATE] Zero-Day Vulnerability in Apache Java Logging Library Log4j
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.3.1)
- CVE-2021-44228Debian apache-log4j2: security update
- CVE-2021-44228Siemens ProductCERT Advisory SSA-479842
- CVE-2021-44228Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.2.4)
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.1.5)
- CVE-2021-44228Siemens ProductCERT Advisory SSA-714170
- CVE-2021-44228Apache Log4j2: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2021-44228Apache Log4j2: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2021-44228[Update] Immediate Actions to Protect Against Exploitation of the Apache Java Logging Library Log4j Vulnerability
- CVE-2021-44228Remote code injection in Log4j
- CVE-2021-44228Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update
- CVE-2021-44228Siemens ProductCERT Advisory SSA-661247
- CVE-2021-44228Siemens ProductCERT Advisory SSA-397453
- CVE-2021-44228Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update
Betroffene Hersteller und Produkte
- Apache Software Foundation Apache Log4j Core
- Apache Software Foundation Apache Log4j2
- Apple Apple Xcode
- Bentley
- Cisco Business Process Automation
- Cisco Cisco Common Services Platform Collector Software
- Cisco Cisco Connected Mobile Experiences 10.2(1.0)
- Cisco Cisco Crosswork Network Change Automation
- Cisco Cisco CX Cloud Agent
- Cisco Cisco Cyber Vision
- Cisco Cisco Data Center Network Manager
- Cisco Dna Spaces\
Mehr zu There's
Weitere Advisories
- Ohne Bewertungosv:CLEANSTART-2024-CX85115There's a memory leak in yajl 2
- Ohne Bewertungosv:CLEANSTART-2025-PR78775There's a flaw in OpenEXR's Scanline API functionality in versions before 3
- Ohne Bewertungosv:CLEANSTART-2025-VY04636There's a flaw in OpenEXR's scanline input file functionality in versions before 3
- Ohne Bewertungosv:CLEANSTART-2025-WN52818There's a flaw in OpenEXR's deep tile sample size calculations in versions before 3
- Ohne Bewertungosv:CLEANSTART-2025-IJ57983There's a flaw in OpenEXR in versions before 3
- Ohne Bewertungosv:CLEANSTART-2025-QD98175There's a flaw in OpenEXR's ImfDeepScanLineInputFile functionality in versions prior to 3
- Ohne Bewertungosv:CLEANSTART-2025-MO99178There's a flaw in lz4
- Ohne Bewertungosv:CLEANSTART-2026-HR57844There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads
Weitere News-Einträge
- ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More StoriesNewsThe Hacker News
- Alibaba's Qwen AI caught trying to contact server in ChinaNewsThe Register — Security
- There's a third PHP2Shell bug, but it won't get an emergency fixNewsThe Register — Security
- I had plans for that secondNewsCisco Talos
- PHP blames supply chain security biz Chainguard for putting huge chunks of the web at riskNewsThe Register — Security
- University of Copenhagen breach exposes data of 525,000 peopleSicherheitsvorfallpwn.watch
- Imagine there's no Shiny Hunters – AI could make human hacking crews obsoleteNewsThe Register — Security
- There's a new way to break RSA that's faster than anything we've seen beforeNewsArs Technica — Security
Quelle: https://blog.talosintelligence.com/theres-only-so-much-code-the-rise-in-vulnerability-numbers/
ID