Vulnerabilities
Microsoft's Project Springfield Allows Developers to Fuzz Code Before Hackers Do
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
A fix included in the OpenSSL updates released last week introduced a critical vulnerability that could potentially lead to arbitrary code execution, the OpenSSL...
Vulnerabilities
Microsoft has decided to remove the Windows Journal application from its operating systems due to the discovery of several vulnerabilities that can be exploited...
Vulnerabilities
Fall is a great time of year. The kids go back to school. The weather begins to cool and the leaves change. Lord Football...
Vulnerabilities
The developers of the Drupal content management system (CMS) announced on Wednesday the availability of versions 8.1.10 and 8.2.0-rc2, which address three potentially serious...
Vulnerabilities
Mozilla has patched many critical and high severity vulnerabilities this week with the release of Firefox 49, including a recently disclosed certificate pinning issue...
Vulnerabilities
Apple on Tuesday released the final version of macOS Sierra 10.12 as a free update and announced that no less than 65 security vulnerabilities...
Management & Strategy
Vulnerabilities
An Indian researcher earned a significant bug bounty from Facebook after discovering a serious vulnerability that could have been exploited to hijack Facebook pages.The...
Vulnerabilities
Security researchers from China-based tech company Tencent have identified a series of vulnerabilities that can be exploited to remotely hack an unmodified Tesla Model...
Vulnerabilities
The US homeland security chief said Friday authorities have confidence in the integrity of electoral systems despite growing cybersecurity threats.
Vulnerabilities
Vulnerabilities discovered by a couple of researchers in the Android version of the secure messaging application Signal can be exploited by remote hackers to...
Vulnerabilities
Attackers have been attempting to exploit a highly critical vulnerability in a third-party Drupal module. The flaw was addressed two months ago, but many...
Vulnerabilities
Microsoft announced on Tuesday the availability of 13 security bulletins that patch roughly 50 vulnerabilities in Windows, Internet Explorer, Edge, Office and Exchange. The...
Vulnerabilities
Adobe announced on Tuesday that security updates released for Flash Player, Digital Editions and Adobe Air SDK & Compiler patch a total of 37...
Vulnerabilities
A security researcher has decided to disclose a critical zero-day vulnerability in the MySQL open-source database software after Oracle failed to release a patch...
Vulnerabilities
WordPress users have been advised to update their installations to version 4.6.1, which fixes a couple of security flaws and over a dozen functionality...
Mobile & Wireless
Google this week released a new set of Android security patches, meant to resolve numerous Critical bugs in the mobile platform, including the recently...
Vulnerabilities
A newly observed Linux Trojan backdoor is actively targeting Internet of Things (IoT) devices and enjoying very low detection rate, even on systems using...
Vulnerabilities
Yelp is looking to squash more of the bugs affecting its platform and applications, and it has just announced the launch of a public...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)