Endpoint Security
A team of researchers from the Graz University of Technology in Austria has revived page Linux page cache attacks.
Hi, what are you looking for?
SecurityWeek
Data Protection
Citing growing risks posed by more capable and autonomous AI agents, Apple will introduce additional controls.
Endpoint Security
Branch Target Reuse (BTR) is a new Spectre v2 attack targeting JIT compilers in web browsers, language runtimes, and the operating system kernel
Data Protection
Researchers show that file-change notification systems can leak keystroke timing, browsing activity, and WhatsApp media events.
Endpoint Security
Check Point Security Management and Log Servers are affected by a critical vulnerability that can allow remote code execution with root privileges.
Endpoint Security
Researchers have disclosed technical details on a new AMD processor attack that allows remote code execution inside confidential VMs.
Endpoint Security
ASRock, Asus, Gigabyte, and MSI motherboards are vulnerable to early-boot DMA attacks.
Cloud Security
Eleven companies took part in the evaluations and several have boasted 100% detection and coverage rates.
Endpoint Security
The PCIe flaws, found by Intel employees, can be exploited for information disclosure, escalation of privilege, or DoS.
Endpoint Security
Windows now displays in the properties tab of LNK files critical information that could reveal malicious code.
Artificial Intelligence
Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.
Endpoint Security
In files downloaded from the internet, HTML tags referencing external paths could be used to leak NTLM hashes during file previews.
Endpoint Security
The tech giant has rolled out fixes for 173 CVEs, including five critical-severity security defects.
Endpoint Security
Users can continue receiving important security updates for Windows 10 by enrolling in the ESU program.
Endpoint Security
The attack uses a passive interposer to control the SGX enclave and extract the DCAP attestation key, breaking the mechanism.
Endpoint Security
The vulnerability could lead to a denial-of-service condition or memory corruption when a malicious font is processed.
Endpoint Security
Binarly researchers have found a way to bypass a patch for a previously disclosed vulnerability.
Cybersecurity Funding
Neon Cyber argues that phishing, social engineering, and insider threats demand protections that follow users into the browser, where most attacks now begin.
Endpoint Security
Researchers devise Phoenix, a new Rowhammer attack that achieves root on DDR5 systems in less than two minutes.
Cybersecurity Funding
The bootstrapped company will invest in an AI-powered unified enterprise platform combining configuration, compliance, patching, and vulnerability management.
Endpoint Security
ReVault vulnerabilities in the ControlVault3 firmware in Dell laptops could lead to firmware modifications or Windows login bypass.
Endpoint Security
Vulnerabilities discovered by Binarly in Lenovo devices allow privilege escalation, code execution, and security bypass.
Endpoint Security
Vulnerabilities in Gigabyte firmware implementations could allow attackers to disable Secure Boot and execute code during the early boot phase.
Endpoint Security
After more than 40 years of being set against a very recognizable blue, the updated error message will soon be displayed across a black...
Close the security gaps between pentests. Join this session to explore agentic pentesting and gain a practical framework for continuous exposure validation in your CTEM program.
RegisterJoin as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)