Application Security
Patch Tuesday: Enterprise software vendor SAP releases patches for high-severity vulnerabilities in multiple products and tools.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Palo Alto Networks has fixed medium- and high-severity vulnerabilities in PAN-OS, Cortex XDR, ActiveMQ Content Pack, and Prisma Access Browser.
Vulnerabilities
Cisco has announced security updates that patch eight vulnerabilities in IOS XR software, including six high-severity bugs.
Vulnerabilities
Intel on Tuesday published advisories covering more than 20 vulnerabilities affecting processors and other products.
Vulnerabilities
Ivanti has released patches for multiple vulnerabilities in Endpoint Manager, Cloud Service Appliance, and Workspace Control.
Vulnerabilities
Google has released a Chrome 128 security update to resolve high-severity memory safety vulnerabilities.
Vulnerabilities
Patch Tuesday: Microsoft raises an alarm for in-the-wild exploitation of a critical flaw in Windows Update.
Vulnerabilities
Vulnerability in Ghostscript (CVE-2024-29510) allows attackers to bypass sandbox for remote code execution.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: Microsoft details Rockwell HMI vulnerabilities, smart grills hacked, Predator spyware activity drops.
Vulnerabilities
The critical OpenSSH vulnerability tracked as regreSSHion and CVE-2024-6387 may already be targeted by attackers, but mass exploitation is unlikely.
Mobile & Wireless
Google ships an Android security update with fixes for 15 vulnerabilities, including a critical-severity flaw in Framework.
Vulnerabilities
Splunk has patched multiple vulnerabilities in Splunk Enterprise, including high-severity remote code execution bugs.
Application Security
EVA Information Security has shared details on three CocoaPods vulnerabilities impacting millions of macOS and iOS applications.
Vulnerabilities
Google has announced a new KVM bug bounty program named kvmCTF with rewards of up to $250,000 for a full VM escape.
Vulnerabilities
Millions of OpenSSH servers could be vulnerable to unauthenticated remote code execution due to a vulnerability tracked as regreSSHion and CVE-2024-6387.
Vulnerabilities
Juniper Networks warns of a critical authentication bypass flaw impacting Session Smart routers and conductors.
Vulnerabilities
Fortra has patched a critical-severity vulnerability in FileCatalyst Workflow leading to the creation of administrator accounts.
Vulnerabilities
GitLab CE and EE updates resolve 14 vulnerabilities, including a critical- and three high-severity bugs.
M&A Tracker
Financial services giant Mastercard is acquiring Recorded Future from private equity firm Insight Partners for $2.6 billion.
Malware & Threats
Artificial Intelligence
Endpoint Security
Endpoint Security
Cybersecurity Funding
Cybersecurity Funding