Vulnerabilities
VMware released updates for several of its products on Thursday to address a critical vulnerability.The VMware Client Integration Plugin (CIP) provides access to a...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
Security researcher Mike Olsen's recent discovery of a malicious iFrame in the embedded control code of a set of security cameras purchased from Amazon...
Vulnerabilities
Google Fixes Flaws That Could Have Allowed Hackers to Hijack User AccountsA researcher got $12,500 from Google for reporting several vulnerabilities in the account...
Vulnerabilities
SAP on Tuesday released its latest patch update for its products, which includes 19 patch notes, 10 of which had a high priority rating.
Vulnerabilities
Adobe released on Tuesday patches for its Creative Cloud, RoboHelp Server and AIR products.
Vulnerabilities
Researchers have identified another IBM Java patch that can be easily bypassed and claim the vendor failed to properly analyze the vulnerability they reported...
Vulnerabilities
Updates released by Microsoft and Samba on Tuesday patch the vulnerability dubbed “Badlock,” although it turns out that the issue is not as severe...
Identity & Access
Mobile phone-based two-factor authentication (2FA) mechanisms are plagued by synchronization vulnerabilities that allow attackers intercept One-Time Passwords (OTPs) and bypass the security of many...
Vulnerabilities
Cisco published six new security advisories this week, with four rated as 'high impact' and two as 'critical impact'. Released on Wednesday, in the...
Vulnerabilities
"Cyber AIR" Act Would Direct FAA to Establish Cybersecurity Standards for AircraftSenator Edward Markey (D-Mass.), Thursday, introduced a proposed new Cyber AIR Act as...
Vulnerabilities
Adobe released a Flash Player update on Thursday to patch a zero-day vulnerability that has been leveraged by cybercriminals to deliver malware via the...
Vulnerabilities
Updates released on Wednesday for the Ubuntu operating system address several vulnerabilities in the Linux kernel, including ones that can be exploited for denial-of-service...
Vulnerabilities
The former CISO of a large intelligence community agency once told me, “The number one challenge in IT Security is the carbon-based life form.”...
Vulnerabilities
The maintainers of the Open Sourced Vulnerability Database (OSVDB) announced this week that the project will be shut down permanently due to the lack...
ICS/OT
The DHS ICS-CERT issued three security advisories on industrial control systems (ICS) this week, again showing that critical infrastructure and industrial networks continue to face...
Vulnerabilities
Adobe informed users on Tuesday that it’s preparing a patch for a Flash Player zero-day vulnerability that has been actively exploited by malicious actors.
Data Protection
A report has claimed that there are vulnerabilities in the US Consular Consolidated Database (CCD) that contains personal details from everyone who has applied...
Mobile & Wireless
Google’s latest set of Nexus patches are rolling out now to resolve multiple Critical vulnerabilities in Android, including a series of remote code execution...
Vulnerabilities
A patch released by IBM in 2013 for a Java sandbox escape vulnerability can be easily bypassed, according to the security firm that discovered...
Vulnerabilities
How Combining Two Completely Separate Open Source Projects Can Make Us All More SecureWhen you run an application, how can you verify that what...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)