• Menu
  • Skip to main content
  • Skip to primary sidebar

The Cyber Security News

Latest Cyber Security News

Header Right

  • Latest News
  • Vulnerabilities
  • Cloud Services
webinar: learn to spot risks and patch safely with community maintained

Webinar: Learn to Spot Risks and Patch Safely with Community-Maintained Tools

You are here: Home / General Cyber Security News / Webinar: Learn to Spot Risks and Patch Safely with Community-Maintained Tools
November 26, 2025

If you’re using community tools like Chocolatey or Winget to keep systems updated, you’re not alone. These platforms are fast, flexible, and easy to work with—making them favorites for IT teams. But there’s a catch…

The very tools that make your job easier might also be the reason your systems are at risk.

These tools are run by the community. That means anyone can add or update packages. Some packages may be old, missing safety checks, or changed by mistake or on purpose. Hackers look for these weak spots. This has already happened in places like NPM and PyPI. The same risks can happen with Windows tools too.

✔ Approved From Our Partners
AOMEI Backupper Lifetime

Protect and backup your data using AOMEI Backupper. AOMEI Backupper takes secure and encrypted backups from your Windows, hard drives or partitions. With AOMEI Backupper you will never be worried about loosing your data anymore.

Get AOMEI Backupper with 72% discount from an authorized distrinutor of AOMEI: SerialCart® (Limited Offer).

➤ Activate Your Coupon Code


To help you patch safely without slowing down, there’s a free webinar coming up. It’s led by Gene Moody, Field CTO at Action1. He’ll walk through how these tools work, where the risks are, and how to protect your systems while keeping updates on track.

In this session, he’ll test how safe these tools really are. You’ll get practical steps you can use right away—nothing theoretical, just what works.

The goal is not to scare you away from community tools. They’re useful. But they need guardrails—rules that help you use them safely without slowing you down.

You will learn:

🔒 How to spot hidden risks

⚙️ How to set safety checks like source pinning, allow-lists, and hash/signature verification

📊 How to prioritize updates using known vulnerability data (KEV)

📦 How to choose between community tools, direct vendor sources, or a mix of both

If you’re not sure when to use community repos and when to go straight to the vendor, this session will help you decide. You’ll also see how to mix both in a safe way.

This webinar is for anyone who manages software updates—whether you’re on a small team or a large one. If you’ve ever wondered what’s really inside that next patch, this session is for you.

It’s free to attend, and you’ll leave with clear actions you can apply the same day. Save your spot here.

Found this article interesting? This article is a contributed piece from one of our valued partners. Follow us on Google News, Twitter and LinkedIn to read more exclusive content we post.


Some parts of this article are sourced from:
thehackernews.com

Previous Post: «romcom uses socgholish fake update attacks to deliver mythic agent RomCom Uses SocGholish Fake Update Attacks to Deliver Mythic Agent Malware
Next Post: Chrome Extension Caught Injecting Hidden Solana Transfer Fees Into Raydium Swaps chrome extension caught injecting hidden solana transfer fees into raydium»

Reader Interactions

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Primary Sidebar

Report This Article

Recent Posts

  • Zero-Click Agentic Browser Attack Can Delete Entire Google Drive Using Crafted Emails
  • Critical XXE Bug CVE-2025-66516 (CVSS 10.0) Hits Apache Tika, Requires Urgent Patch
  • Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell Vulnerability
  • Intellexa Leaks Reveal Zero-Days and Ads-Based Vector for Predator Spyware Delivery
  • “Getting to Yes”: An Anti-Sales Guide for MSPs
  • CISA Reports PRC Hackers Using BRICKSTORM for Long-Term Access in U.S. Systems
  • JPCERT Confirms Active Command Injection Attacks on Array AG Gateways
  • Silver Fox Uses Fake Microsoft Teams Installer to Spread ValleyRAT Malware in China
  • ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More Stories
  • 5 Threats That Reshaped Web Security This Year [2025]

Copyright © TheCyberSecurity.News, All Rights Reserved.