SAP Patches High-Severity Vulnerability in Web Dispatcher

November 12, 2024 at 08:24AM On November 2024 patch day, SAP released eight security notes, notably addressing a high-severity vulnerability in Web Dispatcher. This update highlights their ongoing efforts to enhance security measures. The information was reported by SecurityWeek. **Meeting Takeaways:** 1. **New Security Notes Released**: SAP has issued a total of eight new security … Read more

Organizations Warned of Exploited SAP, Gpac and D-Link Vulnerabilities

October 1, 2024 at 08:51AM CISA alerted organizations about exploited SAP Commerce, Gpac framework, and D-Link DIR-820 router vulnerabilities, which are years old. This warning highlights the ongoing risk posed by these vulnerabilities in the wild. (47 words) Based on the meeting notes, the key takeaway is that CISA has warned about the exploitation of … Read more

Teaming up with IBM to secure critical SAP workloads

July 16, 2024 at 10:18AM Trend Micro partners with IBM to enhance security for critical SAP workloads running on IBM Power servers. The collaboration leverages IBM’s system security expertise and Trend Vision One™ to provide advanced threat protection, detection, and response, addressing the increasing cyber risks faced by SAP customers. The combined solution extends visibility, … Read more

SAP’s First Patches of 2024 Resolve Critical Vulnerabilities

January 10, 2024 at 08:33AM SAP has issued patches for critical vulnerabilities in Business Application Studio, Web IDE, and Edge Integration Cell, marking its first patches of 2024. The post on SecurityWeek highlights the significance of these updates in addressing potential security threats. Based on the meeting notes, it appears that SAP has released patches … Read more

It’s 2023 and Microsoft WordPad can be exploited to hijack vulnerable systems

October 10, 2023 at 07:58PM Microsoft has released over 100 security updates, including fixes for two bugs that are already being actively exploited. One of the vulnerabilities, known as Rapid Reset, is an HTTP/2 weakness that has been used since August to launch distributed denial of service (DDoS) attacks. Microsoft WordPad also has an information … Read more

October 10, 2023 at 02:36PM – Microsoft Fixes Exploited Zero-Days in WordPad, Skype for Business

October 10, 2023 at 02:36PM Microsoft released a large batch of software and OS updates to address over 100 vulnerabilities across Windows systems. They warned that three of these vulnerabilities are already being exploited. The updates also targeted a zero-day vulnerability in HTTP/2 Rapid Reset that exposed the internet to DDoS attacks. Two other zero-day … Read more

October 10, 2023 at 10:48AM – SAP Releases 7 New Notes on October 2023 Patch Day

October 10, 2023 at 10:48AM German software maker SAP has released a total of seven new and two updated security notes as part of its October 2023 Security Patch Day. The most severe note updates the Chromium browser in SAP Business Client, fixing 37 vulnerabilities, including two critical ones. One critical flaw, CVE-2023-4863, is already … Read more