Vulnerabilities
The developers of MatrixSSL have released an update that addresses several vulnerabilities, including ones that could be exploited to take complete control of systems.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
Adobe has released security updates that patch tens of vulnerabilities in the company’s Acrobat, Reader, Flash Player and Creative Cloud Desktop Application products.
Vulnerabilities
More than a dozen vulnerabilities found in video surveillance products from AVTECH could be exploited by Internet of Things (IoT) botnets to ensnare affected...
Vulnerabilities
Researchers have identified more than 500,000 vulnerable Internet of Things (IoT) devices that could easily be ensnared by Mirai or similar botnets.
Vulnerabilities
VMware has released updates for the Windows versions of its Horizon View product to address an important vulnerability that could lead to information disclosure.
Vulnerabilities
X.Org developers released patches and updates to address over a dozen vulnerabilities found in several client libraries. The flaws can be exploited by local...
Vulnerabilities
One of the 78 vulnerabilities that the October 2016 Android Security Bulletin released this week has patched was a flaw in the GPS component...
Mobile & Wireless
Apple’s iMessage service can leak data such as location, device type, and operating system, when the user receives a URL in a message, a...
Vulnerabilities
OneTouch Ping insulin pumps manufactured by Johnson & Johnson-owned Animas are plagued by several vulnerabilities that can be exploited by remote hackers to compromise...
ICS/OT
Botnets powered by Internet of Things (IoT) devices have recently made headlines after powering massive distributed denial of service (DDoS) attacks. The underlying issues...
Endpoint Security
Endpoint security firm Carbon Black announced a new partnership with IBM Security that will allow Carbon Black endpoint threat data to feed into IBM's...
Mobile & Wireless
Google this week released another set of monthly patches for the Android mobile operating system, in an attempt to address no less than 78...
Vulnerabilities
An update released last week for the OpenJPEG library addresses several bugs and important security issues, including a flaw that can be exploited to...
Cybercrime
Exploit Kits Can be Stopped When the Proper Steps are Taken
Tracking & Law Enforcement
The European Union has published its proposal (PDF) for a revised Regulation on the export of dual use goods.
Vulnerabilities
ZERODIUM, a leading zero-day exploit broker, has published its revised bounty figures for the amount it will pay for new zero-days. The highest figure...
Vulnerabilities
The infamous Dridex banking Trojan has adopted new tactics and more advanced encryption and obfuscation to better avoid detection and to hinder security analysis,...
Network Security
Vulnerabilities, Backdoor Found in D-Link DWR-932B LTE Router
Vulnerabilities
Updates released this week by the Internet Systems Consortium (ISC) for the DNS software BIND address two vulnerabilities, including a new high-severity issue that...
Network Security
Where does SWEET32 rank against other SSL vulnerabilities?
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)