Vulnerabilities
Attackers could exploit vulnerable deployments to intercept and tamper with communications in certain configurations.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
On Android, the out-of-bounds write issue can be triggered during the processing of media files without user interaction.
Vulnerabilities
Other noteworthy stories that might have slipped under the radar: Capita fined £14 million, ICTBroadcast vulnerability exploited, Spyware maker NSO acquired.
IoT Security
Set for January 2026 at Automotive World in Tokyo, the contest will have six categories, including Tesla, infotainment systems, EV chargers, and automotive OSes.
Vulnerabilities
CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes.
Vulnerabilities
The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue.
Vulnerabilities
AISLE aims to automate the vulnerability remediation process by detecting, exploiting, and patching software vulnerabilities in real time.
Vulnerabilities
A public PoC existed when Adobe patched the Experience Manager Forms (AEM Forms) bug in early August.
Vulnerabilities
Fortinet and Ivanti have announced their October 2025 Patch Tuesday updates, which patch many vulnerabilities across their products.
Vulnerabilities
Adobe has published a dozen security advisories detailing over 35 vulnerabilities across its product portfolio.
Vulnerabilities
SAP has rolled out additional protections for insecure deserialization bugs resolved in NetWeaver AS Java recently.
Vulnerabilities
It’s unclear if the new Oracle E-Business Suite flaw, which can be exploited remotely without authentication, has been used in the wild.
Vulnerabilities
Patches were rolled out for more than 200 vulnerabilities in Junos Space and Junos Space Security Director, including nine critical-severity flaws.
Vulnerabilities
The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges.
Mobile & Wireless
Apple has announced significant updates to its bug bounty program, including new categories and target flags.
Vulnerabilities
Hundreds of internet-exposed Oracle E-Business Suite instances may still be vulnerable to attacks.
Vulnerabilities
The Medusa ransomware operators exploited the GoAnywhere MFT vulnerability one week before patches were released.
Network Security
The Year 2036/2038 problem is a bug that will be triggered in more than a decade, but hackers could exploit it today against ICS...
Vulnerabilities
The flaw could lead to local code execution, allowing attackers to access confidential information on devices running Unity-built applications.
Data Breaches
Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)