Vulnerabilities
A serious vulnerability found in PwnedList could have been exploited to gain access to millions of account credentials collected by the service.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
CERT/CC has published an advisory detailing the vulnerabilities uncovered by a researcher in February while trying to find security holes in one of Facebook’s...
Vulnerabilities
Allround Automations has released a new version of its PL/SQL Developer product to address a security flaw that allows man-in-the-middle (MitM) attackers to serve...
Vulnerabilities
Microsoft announced on Friday that it’s offering rewards of up to $15,000 for serious vulnerabilities found in Nano Server.
Vulnerabilities
Google on Thursday released an updated version of Chrome 50 for Windows, Mac, and Linux, to resolve 9 security vulnerabilities in the popular web...
Vulnerabilities
The OpenSSL Project announced on Thursday that it’s preparing patches for several vulnerabilities affecting the crypto library.OpenSSL versions 1.0.2h and 1.0.1t will be released...
Vulnerabilities
Mozilla has patched a total of 14 vulnerabilities, including ones rated critical and high severity, with the release of Firefox 46.
Vulnerabilities
A researcher received a $5,000 reward from Facebook after finding a vulnerability that could have been exploited to impersonate users on other websites.
Vulnerabilities
HP has released security updates for various HP Data Protector iterations, in an attempt to patch a series of critical vulnerabilities that could result...
Vulnerabilities
The Massachusetts Institute of Technology (MIT) has launched a bug bounty program to encourage responsible disclosure of vulnerabilities found on its websites.
Vulnerabilities
The Open Web Application Security Project (OWASP) was founded in 2001. This non-profit organization seeks to educate and inform developers on secure development practices,...
Vulnerabilities
Microsoft’s Windows AppLocker, a feature introduced in Windows 7 to specify which users can run apps within an organization, can be bypassed to execute...
Vulnerabilities
Adobe released an update on Thursday for the Analytics AppMeasurement for Flash library to address a DOM-based cross-site scripting (XSS) vulnerability rated “important.”The AppMeasurement...
Vulnerabilities
UPDATED. A researcher received $10,000 from Facebook after uncovering a serious vulnerability and what appeared to be a malicious web shell left behind by...
Cybersecurity Funding
Crowdsourced security testing company Bugcrowd announced today that it has closed $15 million in a Series B funding round led by Blackbird Ventures. The new...
Vulnerabilities
Oracle’s Critical Patch Update (CPU) for April 2016 was released on Tuesday, bringing 136 security fixes across multiple product families. Many of the vulnerabilities...
Vulnerabilities
Last week, Microsoft patched multiple vulnerabilities in its products, including the "MouseJack" flaw that could allow attackers to execute malicious commands on a computer...
Vulnerabilities
Google has teamed up with the University of California, Berkeley to conduct a study on the effectiveness of notifications sent out by the company...
Vulnerabilities
Microsoft released several security updates this month as part of its regular Patch Tuesday update, including the overhyped Badlock flaw.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)