PHP emergency fixes address two critical RCE flaws as exploitation attempts were reported
PHP emergency fixes address two critical RCE flaws as exploitation attempts were reported
News
Microsoft Azure urges network-based compensating controls as patch windows shrink
Microsoft Azure says patch validation and deployment timelines no longer match current exploitation speed and is urging enterprises to add adaptive, network-based compensating controls during remediation. In a Microsoft Azure Blog post, Microsoft argues the usual sequence of disclosure, exposure assessment, testing and patch rollout is increasingly out of step with attacker timelines. Microsoft says organizations may need days or weeks to validate and deploy fixes, while exploitation can emerge within hours. Help Net Security separately reported Rapid7’s assessment that the gap between patch release and weaponization has approached zero.