// vulnerability

All signals tagged with this topic

Aug 26

Oracle's Patched Systems Still Vulnerable to New Attack Class

Source: The Register: Biting the hand that feeds

A newly discovered attack exploits Oracle systems not through unpatched vulnerabilities but by abusing legitimate functionality—meaning organizations that follow security best practices remain exposed. This is a shift in enterprise risk: the assumption that timely patching equals safety no longer holds. Security teams must now defend against attackers who understand application logic rather than just code flaws. For Oracle customers and their IT leaders, this means patch-as-primary-defense is no longer sufficient and demands deeper architectural controls.

theme-connected hardware security data center infrastructure vulnerability

Aug 6

Critical motherboard flaw exposes thousands of enterprise servers to remote backdoors

Source: Ars Technica

Researchers discovered exploitable vulnerabilities in BMC (baseboard management controller) firmware across Dell, HP, and Lenovo servers. The flaws allow unauthenticated remote attackers to gain persistent access below the operating system level—the "lights-out" management layer that survives OS wipes and reboots. A compromised BMC lets attackers control the entire server regardless of what software runs on top. Security teams rarely audit BMCs or know how to patch them, leaving a blind spot in enterprise hardware that has grown more connected and more complex.