Vulnerabilities
Most attacks that are targeting vulnerabilities in Microsoft Office to compromise victims’ systems are currently leveraging two security issues that were discovered last year,...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Updates released on Monday by the Internet Systems Consortium (ISC) for BIND, the most widely used DNS software, address a medium severity vulnerability.
Vulnerabilities
Researchers discovered that a vulnerability whose existence has been known for 15 years could affect many web applications, allowing malicious actors to launch man-in-the-middle...
Vulnerabilities
Apple released on Monday security updates for OS X, iOS, watchOS, tvOS, Safari, iTunes and iCloud to address tens of vulnerabilities identified by the...
Vulnerabilities
Security weaknesses on many popular fitness trackers may allow hackers to access or potentially manipulate user data, a study showed Monday.
Vulnerabilities
A serious vulnerability in the Mac OS X firewall Little Snitch could have been exploited by hackers to gain root privileges on a system...
Vulnerabilities
The developers of the Neutrino exploit kit have added a recently patched Internet Explorer vulnerability to their arsenal after researchers published a proof-of-concept (PoC)...
Vulnerabilities
Microsoft this week patched more than 40 vulnerabilities in Internet Explorer, Edge, Office, and other products, including a 20-year old issue that made Windows...
Vulnerabilities
Drupal this week released security updates for three modules to patch Highly Critical and Critical remote code execution (RCE) vulnerabilities in them.
Vulnerabilities
Fiat Chrysler Automobiles (FCA) announced on Wednesday the launch of a bug bounty program aimed at improving the cybersecurity of the company’s vehicles.
Vulnerabilities
Hidden Voice Commands Can Compromise Mobile DevicesAmong the multiple ways of compromising a mobile device, a new method was recently analyzed by researchers that...
Vulnerabilities
SAP released a set of monthly security updates for July 2016, which included 10 security notes, one of which was rated Hot News.
Risk Management
Organizations Must Put Security Vulnerabilities Into the Context of Their Exploitability
Vulnerabilities
As part of its monthly security update cycle, Microsoft on Tuesday released 11 security bulletins to resolve multiple vulnerabilities in Internet Explorer, Edge, Office,...
Vulnerabilities
Adobe today released security updates for Flash Player, Acrobat, Reader, and XMP Toolkit for Java, to address multiple Critical vulnerabilities affecting Windows, Mac OS...
Vulnerabilities
Persistent cross-site scripting (XSS) vulnerabilities were patched over the past several days in three popular WordPress plugins, including Activity Log, All in One SEO...
Vulnerabilities
A local code execution vulnerability that affects the Intel HD Graphics Kernel Mode Driver for Windows could allow an attacker to run arbitrary code...
Endpoint Security
DoS Vulnerability Affects Symantec Endpoint Protection (SEP) and Norton Products on WindowsSymantec has recently patched a denial of service (DoS) vulnerability that plagued its...
Cybercrime
Kaspersky Lab is monitoring a new cyber espionage group that it calls Dropping Elephant. A surprising -- and somewhat worrying -- feature is that...
Vulnerabilities
The BMW ConnectedDrive Web portal was found to contain a vulnerability that could result in a compromise of registered or valid vehicle identification numbers,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)