LinkedIn, Zen Cart and Lenovo all patched critical vulnerabilities in their software over the Thanksgiving weekend. The social site’s style sheets allow users to customize the look and feel of their blog posts. Lenovo also patched two critical issues that could have allowed malicious actors to easily guess admin passwords or elevate privileges on a Windows device. Security firm High-Tech Bridge found the flaw on Nov. 25; Zen Cart said it patched the problem within 24 hours; the company will release the full details of the vulnerability on Dec. 16.”]
Source: https://securityintelligence.com/news/all-patched-up-software-catches-a-break-over-holiday-weekend/