Endpoint Security
A race condition in PackageKit allows unprivileged users to escalate privileges when installing packages.
Hi, what are you looking for?
SecurityWeek
Endpoint Security
Kaspersky told SecurityWeek that it patched the vulnerability affecting its Endpoint Security product.
Endpoint Security
Microsoft fixed critical vulnerabilities across Azure, Entra, and SharePoint, while Apple patched a high-severity authentication bypass.
Cybersecurity Funding
The company was previously valued at $1.6 billion, and the latest raise has significantly increased that valuation.
Endpoint Security
Apple announced that dozens of vulnerabilities have been patched in each of its operating systems.
Endpoint Security
CrowdStrike has fixed a critical LogScale vulnerability, while Tenable addressed a high-severity Nessus flaw.
Endpoint Security
Researchers have demonstrated that GPU Rowhammer attacks can be used to escalate privileges.
Disaster Recovery
The computer giants have announced new security capabilities for PCs and printers.
Endpoint Security
Apple released security fixes for older devices as well, in iOS 18.7.7, iPadOS 18.7.7, macOS Sequoia 15.7.5, and macOS Sonoma 14.8.5.
Cybersecurity Funding
The company’s endpoint security platform monitors behavior and verifies user intent to stop cyberattacks in real time.
Endpoint Security
The lightweight updates are meant to deliver security protections between security updates.
Endpoint Security
The malware disables antivirus and EDR protections at the kernel level, clearing the path for credential harvesting, system reconnaissance, and eventual data exfiltration.
Endpoint Security
Starting September 2026, new Chrome iterations will be released twice as fast, part of a two-week cycle.
Endpoint Security
TrendAI has fixed eight critical and high-severity issues in Windows and macOS endpoint security products.
Artificial Intelligence
The stocks of major cybersecurity companies have fallen sharply over fears that AI is disrupting the industry.
Endpoint Security
Windows will have runtime safeguards enabled by default, ensuring that only properly signed software runs.
Endpoint Security
After a decade and a half of service, the current certificates will expire, and new ones will be rolled out.
Endpoint Security
More than two dozen advisories have been published by the chip giants for vulnerabilities found recently in their products.
Endpoint Security
A team of researchers from the Graz University of Technology in Austria has revived page Linux page cache attacks.
Endpoint Security
Researchers have disclosed technical details on a new AMD processor attack that allows remote code execution inside confidential VMs.
Endpoint Security
ASRock, Asus, Gigabyte, and MSI motherboards are vulnerable to early-boot DMA attacks.
Cloud Security
Eleven companies took part in the evaluations and several have boasted 100% detection and coverage rates.
Endpoint Security
The PCIe flaws, found by Intel employees, can be exploited for information disclosure, escalation of privilege, or DoS.
Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)