Cybercrime
Angler and Nuclear, two of the exploit kits (EKs) that dominated the landscape for years, are gone, with Neutrino and RIG being the leading...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
We live in a connected world where we have multiple online accounts that are often segregated between our personal and work lives. Being able...
Vulnerabilities
Security updates released on Wednesday for Drupal 7 and Drupal 8 patch a couple of access bypass and privilege escalation vulnerabilities.
Vulnerabilities
SAP on Tuesday released a series of updates for its products, patching a total of 21 vulnerabilities, including four critical flaws, of which one...
Vulnerabilities
Microsoft has released a total of 16 security bulletins for June 2016 to fix nearly 40 vulnerabilities in Windows, Edge, Internet Explorer, Office and...
Vulnerabilities
Adobe has released security updates for several of its products, but a critical Flash Player zero-day vulnerability exploited in targeted attacks will only be...
Vulnerabilities
Intel has revealed Control-flow Enforcement Technology (CET), a new safety mechanism to hinder Return Oriented Programming (ROP) and Jump Oriented Programming (JOP) attacks.
Email Security
Server Bug Exposes Email Addresses of 7,618 Let's Encrypt Users
ICS/OT
Symantec Expands IoT Security Portfolio to Connected Cars
Vulnerabilities
In an effort to help secure open source software, Mozilla this week announced the creation of Secure Open Source (“SOS”) Fund, which kicks off...
Vulnerabilities
A serious Chrome vulnerability patched recently by Google allowed hackers to execute arbitrary code on a system by using malicious PDF documents.The vulnerability, discovered...
Vulnerabilities
The number of bug bounty programs launched over the past year has increased considerably and more than a quarter of programs are run by...
Vulnerabilities
An unpatched vulnerability in a popular Wi-Fi camera from D-Link allows hackers to reset the device’s password and gain remote access to its video...
Vulnerabilities
Microsoft Offers Up to $15,000 in Bounties for .NET Core, ASP.NET RC2 Beta Vulnerabilities Microsoft this week announced an expansion to its bug bounty...
Vulnerabilities
Mozilla addressed more than a dozen vulnerabilities in the Firefox web browser with the release of version 47 on Tuesday, including issues rated as...
Mobile & Wireless
Google on Monday released the June 2016 set of security updates for the Android operating system, meant to patch a total of 40 vulnerabilities...
Network Security
Port Scanning Project Infers Security Posture by Country
Vulnerabilities
Researchers discovered that Facebook Messenger is plagued by a vulnerability that allows hackers to replace the content of the messages they send through the...
Vulnerabilities
Hackers Can Disable Alarm on Mitsubishi Outlander PHEV Cars
Vulnerabilities
A security researcher earned $10,000 through Uber’s bug bounty program for reporting a critical authentication bypass vulnerability affecting a third party WordPress plugin.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)