Vulnerabilities
Google and Mozilla have released patches for multiple high-severity vulnerabilities affecting Chrome and Firefox.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The vulnerability was patched by Microsoft in July and CISA warned that it could end up being exploited in the wild.
Vulnerabilities
Intel has informed customers about several high-severity vulnerabilities that can lead to privilege escalation and even code execution.
Vulnerabilities
The bug allowed attackers to gain full control of the victims’ systems and deploy the ForestTiger backdoor.
Vulnerabilities
The vulnerabilities could be exploited to leak credentials for external SQL connections or crash an agent service.
Vulnerabilities
A researcher said he found vulnerable internal services that exposed the information of 270,000 Intel employees.
Vulnerabilities
A new public exploit chains two critical flaws in SAP NetWeaver, exposing unpatched instances to code execution attacks.
Vulnerabilities
More than 870 N-able N-central instances have not been patched against CVE-2025-8875 and CVE-2025-8876, two exploited vulnerabilities.
Application Security
CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured, and maintained.
Vulnerabilities
Cisco has released over 20 advisories as part of its August 2025 bundled publication for ASA, FMC and FTD products.
Vulnerabilities
Path traversal and XXE injection flaws allowing unauthenticated remote code execution have been patched in Xerox FreeFlow Core.
Vulnerabilities
CISA reported becoming aware of attacks exploiting CVE-2025-8875 and CVE-2025-8876 in N-able N-central on the day they were patched.
Vulnerabilities
The new DDoS attack vector, which involves HTTP/2 implementation flaws, has been compared to Rapid Reset.
Vulnerabilities
Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products.
Vulnerabilities
Fortinet and Ivanti have published new security advisories for their August 2025 Patch Tuesday updates.
Vulnerabilities
Adobe’s security updates fix vulnerabilities in Commerce, Substance, InDesign, FrameMaker, Dimension and other products.
Vulnerabilities
Microsoft’s August 2025 Patch Tuesday updates address critical vulnerabilities in Windows, Office, and Hyper-V.
Application Security
Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured,...
Vulnerabilities
SAP has released 15 new security notes on the August 2025 Patch Tuesday, including for critical vulnerabilities.
Vulnerabilities
A researcher has been given the highest reward in Google’s Chrome bug bounty program for a sandbox escape with remote code execution.
Vulnerabilities
A researcher has demonstrated how a platform used by over 1,000 dealerships in the US could have been used to hack cars.
Application Security
Taking place August 12-13, CodeSecCon is the premier virtual event bringing together developers and cybersecurity professionals to revolutionize the way applications are built, secured,...
Vulnerabilities
CISA and Microsoft have issued advisories for CVE-2025-53786, a high-severity flaw allowing privilege escalation in cloud environments.
Vulnerabilities
A desync attack method leveraging HTTP/1.1 vulnerabilities impacted many websites and earned researchers more than $200,000 in bug bounties.
Join this live webinar as we explore if detection-first security operations can keep pace with AI, or if it’s time to rethink prevention as the strongest default.
RegisterCodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps!
RegisterExpert Insights
Organizations are rushing to implement AI without fully grasping where its legal protections begin and end.
(Steve Durbin)
Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use.
(Etay Maor)
The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change.
(Matt Honea)
You cannot out-patch a machine that writes a working exploit from a vulnerability description in twenty hours. Stop trying to optimize a game you cannot win.
(Danelle Au)
Identity confidence changes throughout every interaction and should be reassessed continuously as new risk signals emerge.
(Torsten George)