Ghostscript bug could allow rogue documents to run system commands

By Paul Ducklin — July 4^th 2023 at 17:57

Even if you've never heard of the venerable Ghostscript project, you may have it installed without knowing.

MOVEit mayhem 3: “Disable HTTP and HTTPS traffic immediately”

By Paul Ducklin — June 15^th 2023 at 22:10

Twice more unto the breach... third patch tested and released, shut down web access until you've applied it

mi-1200

By Paul Ducklin — December 8^th 2022 at 19:58

Don't keep calling home to a JavaScript server that closed its doors eight years ago!

By Paul Ducklin — June 24^th 2022 at 15:32

Fortunately, it's not a major bugfix, which means it's easy to patch and can teach us all some useful lessons.