Vulnerabilities
Black Hat USA 2016 – Apple announced on Thursday its intention to launch a bug bounty program that gives a select group of researchers...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
Panasonic Avionics, one of the world’s biggest suppliers of inflight entertainment and communications systems, has launched a bug bounty program on the HackerOne platform.
Vulnerabilities
Just two weeks after Chrome 52 was released in the stable channel, Google has issued an update to resolve 10 security vulnerabilities, 7 of...
Vulnerabilities
Black Hat USA 2016 – Researchers at Microsoft have demonstrated that a Windows vulnerability previously believed to be exploitable only in physical access scenarios...
Network Security
Black Hat USA 2016 – Imperva today revealed details on four high-profile attack vectors affecting HTTP/2, the new version of the HTTP protocol.
Identity & Access
An issue affecting Microsoft’s Windows operating system could result in leaked user credentials if Internet Explorer and Edge are being used, researchers discovered.
Vulnerabilities
Charlie Miller and Chris Valasek, the researchers who last year showed that cars can be remotely hijacked, are back with a new demonstration, and...
Mobile & Wireless
Google on Monday announced new security patches for the Android operating system, focusing mainly on resolving a series of critical bugs in drivers, some...
Vulnerabilities
Kaspersky Lab Launches New Bug Bounty Program on HackerOne Platform
Vulnerabilities
A bug bounty hunter has disclosed a series of vulnerabilities that he claims gave him complete access to a production database of the online...
Endpoint Security
Starting in Windows 10 version 1607, new kernel mode drivers will not be loaded unless they have been signed by Microsoft, the company announced.
Identity & Access
QRLJacking is the term given to a new social engineering method of compromising the QR Login process. QR Login had previously been considered both...
Vulnerabilities
Researchers at security firm Rapid7 have identified several vulnerabilities in the home and professional versions of Osram’s Lightify smart connected lighting products.
Vulnerabilities
Enterprise software maker Micro Focus released security updates for its Filr product last week to patch several critical vulnerabilities discovered by researchers at SEC...
Vulnerabilities
A researcher has earned a significant reward from Twitter after finding a critical security hole that gave him access to the source code of...
Vulnerabilities
It turned out to be a tricky month for security admins to take that long-awaited summer vacation because July was one of the busiest...
Vulnerabilities
A team of researchers discovered a couple of serious vulnerabilities in PHP and managed to gain remote code execution access on one of the...
Application Security
Vulnerabilities in SAP HANA represent a risk to more than 10,000 SAP customers running different versions of the popular business-critical application, security firm Onapsis...
Vulnerabilities
An update released this week by the developers of WooCommerce, the popular ecommerce plugin for WordPress, patches a flaw that could allow attackers to...
Vulnerabilities
Google on Wednesday released Chrome 52 in the stable channel and revealed that no less than 48 security vulnerabilities were resolved in the popular...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)