Vulnerabilities
A new version of the Network Time Protocol daemon (ntpd) released last week by the NTP Project addresses several vulnerabilities, including a high severity...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
ICS/OT
Security testing firm IOActive recently surveyed 129 security professionals on the security of Internet of Things devices at its IOAsis San Francisco 2016 event March...
Vulnerabilities
Trustwave SpiderLabs has discovered a 0-day Windows exploit being offered for sale on an underground forum for Russian speaking cyber criminals. Although the researchers...
ICS/OT
ICS-CERT has released a security advisory for an ICS product used in the energy industry that cannot be patched, and there are publicly available...
Vulnerabilities
An OpenSSL vulnerability patched in early May with the release of versions 1.0.2h and 1.0.1t still hasn’t been patched on many of the world’s...
Vulnerabilities
Carnegie Mellon University's CERT has issued a security advisory on the MEDHOST Perioperative Information Management System (PIMS), a system designed to streamline the progress from...
Malware & Threats
A recently patched Adobe Flash Player vulnerability is being abused in a new malvertising campaign that redirects users to the Angler exploit kit (EK),...
Vulnerabilities
Released on Wednesday in the stable channel, Chrome 51 patches 42 security vulnerabilities, including 23 flaws that have been disclosed by external researchers.
Vulnerabilities
A product manager approaches the security architect. “Please,” the product manager says, “I only have one or two more releases of this product before...
Vulnerabilities
An update released by Adobe for its Connect web conferencing software addresses over two dozen functionality bugs and one security flaw.
Mobile & Wireless
A Critical Elevation of Privilege (EoP) vulnerability in the Qualcomm Secure Execution Environment (QSEE) affects around 60 percent of all Android devices around the...
Vulnerabilities
A researcher received a $5,000 bounty from Facebook after finding two vulnerabilities that could have allowed hackers to brute-force Instagram account passwords.
Vulnerabilities
A journalist asked me an interesting question this week: “Why doesn’t the Agile Manifesto address security?” After some thought, I think I have a...
Vulnerabilities
Yahoo has paid out a total of more than $1.6 million since the launch of its public bug bounty program in 2013, the tech...
Vulnerabilities
VMware has released updates for several of its products to patch a couple of vulnerabilities rated critical and important.The critical vulnerability is related to...
Vulnerabilities
Updates released on Monday by Apple for OS X, iOS, iTunes, Safari, tvOS and watchOS patch tens of vulnerabilities discovered by external researchers and...
Vulnerabilities
Google is planning to block Adobe Flash and implement an 'HTML5 by Default' policy on Chrome by the end of 2016. The intention is...
Vulnerabilities
An update released this week for the open source file archiver 7-Zip patches a couple of serious vulnerabilities discovered by researchers of Cisco’s Talos...
Application Security
The ongoing battle over the Federal Bureau of Investigation’s (FBI) use of a zero-day in the Tor anonymity browser hit a new gear this...
Vulnerabilities
Adobe has updated Flash Player for Windows, Mac and Linux to address a total of 25 vulnerabilities, including a zero-day that has been exploited...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)