Vulnerabilities
PayPal has patched a vulnerability that could have been exploited by attackers to send malicious emails to users via the payment processor’s own systems.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
M&A Tracker
Thousands Internet-connected printers around the world have been “hacked” and commanded to print anti-Semitic flyers.
Application Security
Zen Cart on Friday released an updated version of the popular online open source shopping cart application to address multiple Cross-Site Scripting (XSS) vulnerabilities.
Vulnerabilities
Surveillance cameras sold by more than 70 vendors worldwide were found to be vulnerable to Remote Code Execution (RCE) because of shared firmware code,...
Vulnerabilities
Google has once again updated the Windows, Mac and Linux versions of Chrome 49 in order to patch several vulnerabilities, including high-risk issues for...
Vulnerabilities
Oracle announced on Wednesday that it has released an update for Java SE to address a serious vulnerability.
Vulnerabilities
SentinelOne lead OS X security expert Pedro Vilaça discovered a serious local privilege escalation vulnerability in OS X that can be leveraged to bypass...
Network Security
Should you panic about the recently disclosed DROWN SSL vulnerability? Is it cute and kid-friendly, or is it a monster vulnerability coming to expose...
Vulnerabilities
A group of attackers believed to be from Pakistan has been targeting Indian military personnel in a data theft campaign involving social engineering and...
Vulnerabilities
Uber announced on Tuesday the launch of a bug bounty program whose goal is to encourage security researchers to responsibly disclose vulnerabilities found in...
Mobile & Wireless
Google has released an emergency security patch to address a local elevation of privilege vulnerability in the Android kernel that affects certain devices.
Vulnerabilities
Symantec has released an update for its Symantec Endpoint Protection (SEP) to resolve three High risk security vulnerabilities in the product.
Vulnerabilities
In response to criticism from the CVE Editorial Board, the MITRE Corporation has decided to put a recently announced pilot program meant to address...
Vulnerabilities
Microsoft announced this week at the CanSecWest conference in Vancouver, Canada, that it has added OneDrive to the company’s Online Services Bug Bounty Program.The...
Vulnerabilities
FBI Reminds That Connected Cars Are Increasingly Vulnerable to Remote Exploits
Vulnerabilities
With an increasing number of researchers displeased with the fact that it takes a lot of time to assign Common Vulnerabilities and Exposures (CVE)...
Vulnerabilities
Pwn2Own 2016 has come to an end, with researchers earning a total of $460,000 in cash for disclosing 21 new vulnerabilities in Windows, OS...
Vulnerabilities
Researchers at Trend Micro have been monitoring a business email compromise (BEC) campaign aimed at companies from all around the world.
Application Security
“…is part of this balanced breakfast…” This is the claim of many sugary cereals aimed directly at children. It is also the claim of...
Vulnerabilities
Pwn2Own 2016 contestants hacked Apple Safari, Adobe Flash Player and Google Chrome, and earned more than $280,000 on the first day of the competition...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)