Incomplete Security Patches Show Hackers Where to Look Next

Security patches need patches now that attackers have AI

Terra finds sharp rise in GitHub security fixes reported broken within 90 days

Hackers are using patches to create vulnerability ‘maps’ – that means the 'patch and move on' approach needs to end | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #hacker - National Cyber Security Consulting

Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter Security updates are vital in keeping software secure and users safe, but they could also act as a map for hackers to find weak spots in code, including subsequent patches.That's according to research from Terra Security, which said the rate […] Thank you for subscribing to our RSS feed!

Incomplete security patches show hackers where to look next

Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra Security, began tracking broken fixes after the team kept running into them in its own work over the past year. “A fix would ship, a bypass would be found, and another fix would go out. Worried this was sample bias, we looked at every published CVE record … More →

Hackers are using patches to create vulnerability ‘maps’ – that means the 'patch and move on' approach needs to end

Terra Security has spotted a leap in vulnerabilities in patches or otherwise fixed code