Welcome back to the Patchstack Weekly Security Update! This update is for week 4 of 2022.

In this week's session, I will share a few high-risk vulnerabilities that were patched this week and provide an update on details about the un-patched WordPress theme vulnerabilities that Patchstack continues to deal with.

During this week's knowledge share I will identify the many players in open source security. These are the people in many different roles, that play a part in open source security beyond the developers and the end-users of their open-source projects.

Patchstack engages with people of varying roles, who have different responsibilities and risks when it comes to protecting open source projects.

Welcome back to the Patchstack Weekly security update. It is the third week of 2022 and this episode is called WordPress vulnerabilities & Cross-Site Request Forgery.

Within this session, I will inform you of 6 popular open-source WordPress components that have patched various vulnerabilities in their code, from information disclosure to cross-site scripting and cross-site request forgery.

In this week's knowledge share, I will discuss cross-site request forgery vulnerabilities, what their risks are, and share an easy fix for it using nonces.

Your host, Robert

Welcome back to the Patchstack Weekly security update! This is Episode 6.

In this week's session, we will cover a WordPress plugin that patched a critical authenticated remote code execution bug.

As well as big disclosure by the Patchstack Red Team, which identifies dozens of themes that shared the same vulnerable code between them and there is no patch available.

Finally, I will talk about an open-source developer who protested against the abuse of their time by large companies who use their projects at no cost.

Giving back to open source projects will be the topic of this week's knowledge share. I discuss the importance of supporting open source projects and how to get started.

Welcome to the Patchstack Weekly security update! This is the first Patchstack update for 2022, happy new year and let's get into the security news.

This week I will give a quick roundup detailing the number of vulnerabilities added to the Patchstack database last month and I will give an update on the backlog of unpatched vulnerabilities we are working on addressing.

I will then cover the topic of secrets as it pertains to authentication, and how you can understand some granular points of what makes something secret how to secure your login pages with more than just a password.

Welcome back to the Patchstack Weekly security update! This update is for week 52 of 2021.

This week marks the final week of 2021, and with the year coming to a close it is a great time to reflect on the past, present, and future. So that is the format of this week's update.

this week's vulnerability news is for a critical vulnerability in a WordPress plugin with, get this: an unauthenticated arbitrary option table update vulnerability in it.

Welcome back to the Patchstack Weekly security update! This update is for week 51 of 2021.

This week's news may sound like deja-vu, as I will cover more of the same topics as I did last week. Log4j is still a leading security concern, and the project's developers have released yet another security update, this time to address a Denial of Service concern.

I will also once again discuss WordPress plugins with options table update vulnerabilities reported in them ... the difference this time is, there is no patch.

Welcome to the Patchstack Weekly security update! This update is for week 50 of 2021. 

It is mid-December, and we are still waiting to see the total impact of a vulnerability reported in the open-source component: log4j. This is a library used in a large number of java applications and I will get the details later during this week's knowledge share.

In WordPress security news this week, there are a few plugins that have serious vulnerabilities reported in them, including unauthenticated attacks that may affect tens of thousands of websites. So, let's get to that right away!

Welcome to the Patchstack Weekly security update, this update is for December 9th, 2021. We will talk about the Gravatar breach, web history, and vulnerabilities from this week.

In this week's session, we have two high-risk vulnerabilities to report in WordPress plugins and I will talk about the Gravatar email leaks, one-way encryption, and how the web experience has changed over the years.

I will give recognition to the technical pioneers that brought us Web 2.0, and acknowledge those who are currently looking forward, the yet-to-be-named pioneers who are about to build what will be known as Web3.