WordPress issues critical security fixes, closing remote anonymous compromise bug and more

WordPress has just published a critical security release. If you’re still on WordPress 3, this is about as critical as it gets, because one of the fixes closes a “remote anonymous compromise” bug.

Microsoft “tops up” Patch Tuesday, issues delayed fix for zero-day hole in logon security

Microsoft has issued a “top up” security bulletin for a fix that didn’t quite make it into the November 2014 Patch Tuesday. The vulnerability can be used to turn any user into a domain administrator, and it’s been exploited in the wild…

POODLEs, Sandworms and getting safe online – 60 Sec Security [VIDEO]

The week’s security news, turned into an entertaining lesson, turned into a 1-minute video. Enjoy…

Apple kills the POODLE – also fixes Shellshock in case you forgot

Apple just shipped OS X 10.10 Yosemite – including a fix for the POODLE vulnerability. Mavericks and Mountain Lion also got updates to kill the POODLE. As for Lion, now three releases off the pace…bad news.

Are you tired of weak or fake zero-day exploits? 60 Sec Security [VIDEO]

Watch our latest 60 Second Security video! An entertaining but insightful look at the week’s security woes – in just one minute…

Firefox sneaks out an “inbetweener” update, with security improvements rather than fixes

Usually, if everything goes according to plan, Firefox updates appear every six weeks. But if needs must, Mozilla delivers in-between updates, too, and that’s what has happened here, bumping Firefox from version 32.0 to 32.0.1.

Firefox 32.0 fixes holes, shakes out some old SSL certs, introduces certificate pinning

Yesterday was Firefox’s Fortytwosday (updates come out every 42 days, on Tuesdays, in a nod to Douglas Adams), bringing us to Firefox 32.0. There are also two Extended Support Releases for the more conservative amongst us…