Vulnerabilities
Google on Wednesday released yet another set of security patches for Chrome 50, resolving five vulnerabilities in the popular web browser, three of which...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Yahoo rewarded a bug bounty hunter after he demonstrated that a recently disclosed ImageMagick vulnerability could be exploited for remote code execution on a...
Application Security
Security researchers are seeing evidence that up to 36 global organizations have been hacked via exploits against a vulnerability in SAP Business Applications that...
Vulnerabilities
SAP on Tuesday issued a new round of monthly security updates for its products, patching a total of 10 vulnerabilities, including critical flaws in...
Vulnerabilities
Microsoft released on Tuesday 16 security bulletins to patch more than 30 vulnerabilities, including JScript and VBScript zero-days exploited in attacks targeting users in...
Application Security
A zero-day vulnerability in Adobe’s ubiquitous Flash Player software is being exploited to launch malware attacks, the company warned in an advisory issued today.The...
Application Security
Vulnerabilities
A security researcher was arrested and charged after finding some serious vulnerabilities on a couple of elections websites in Florida.
Malware & Threats
Lenovo's problems with pre-installed bloatware causing major security problems for computer users aren’t going away anytime soon.
Application Security
Adobe’s widely deployed PDF Reader and Acrobat software products will get security band-aids on May 10 to cover dangerous vulnerabilities that put users at...
Vulnerabilities
An analysis of proof-of-concept (PoC) exploits shared online over the last year has shown that social media is the main distribution channel for PoCs,...
Vulnerabilities
Apple released an update for its Xcode integrated development environment this week to address a couple of serious vulnerabilities in the Git version control...
Vulnerabilities
A vulnerability in the popular WordPress plugin bbPress can be exploited to insert malicious JavaScript code into forum posts, web security company Sucuri has...
Vulnerabilities
Researchers have discovered several vulnerabilities in the popular image processing suite ImageMagick, including a serious remote code execution flaw that has been exploited in...
Vulnerabilities
The OpenSSL Project released on Tuesday versions 1.0.2h and 1.0.1t to patch several vulnerabilities that can be exploited for denial-of-service (DoS) attacks, arbitrary code...
Vulnerabilities
Paris-based start-up Sqreen announced that it has raised a $2.3 million seed round to ship app 'protection-as-a-service'. This service "provides every developer a simple...
Vulnerabilities
A serious vulnerability found in PwnedList could have been exploited to gain access to millions of account credentials collected by the service.
Vulnerabilities
CERT/CC has published an advisory detailing the vulnerabilities uncovered by a researcher in February while trying to find security holes in one of Facebook’s...
Vulnerabilities
Allround Automations has released a new version of its PL/SQL Developer product to address a security flaw that allows man-in-the-middle (MitM) attackers to serve...
Vulnerabilities
Microsoft announced on Friday that it’s offering rewards of up to $15,000 for serious vulnerabilities found in Nano Server.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)