Vulnerabilities
Adobe announced on Thursday that it will release security updates next week to patch vulnerabilities in Acrobat and Reader products.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Tracking & Law Enforcement
US Secretary of Defense Ashton Carter has said he opposes high-tech "back doors" that would allow the government access to encrypted data on people's...
Vulnerabilities
Google on Wednesday released Chrome 49 in the stable channel for Windows, Mac and Linux, providing users with 26 security fixes and various other...
Vulnerabilities
Apple over the weekend reissued a security update for OS X El Capitan systems after the initial update blocked Apple’s own Ethernet drivers.
Cyberwarfare
Ever wanted to hack Uncle Sam? Provided you're American and can pass a background check, go right ahead, the Pentagon said Wednesday.
Vulnerabilities
The OpenSSL Project has released updates to patch several vulnerabilities in the crypto library, including a high severity TLS issue that can be exploited...
Vulnerabilities
Apple has patched more than 60 vulnerabilities with the release of Apple TV 7.2.1, including flaws that can lead to arbitrary code execution, application...
ICS/OT
The IoT wave is building like a thunderous tsunami, growing larger on the horizon by the day. What is missing from the conversation, however,...
Vulnerabilities
The OpenSSL Project announced today that it will release versions 1.0.2g and 1.0.1s to patch several vulnerabilities, including ones rated “high severity.”The updates are...
Vulnerabilities
Drupal has released versions 6.38, 7.43 and 8.0.4 to patch a total of ten vulnerabilities, including one rated critical.
Vulnerabilities
Privacy
Baidu Browser, a web navigation application available on Android and Windows devices, is collecting a large amount of personally identifiable data and transmitting it...
Vulnerabilities
A critical remote code execution vulnerability found in the GNU C Library (glibc) affects most Linux systems and many widely used products, including ones...
Vulnerabilities
A tech support tool bundled with Comodo security products was plagued by a vulnerability that could have been exploited by a local attacker to...
Vulnerabilities
Google has released a Chrome update to patch a critical vulnerability reported by a researcher who has asked the search giant not to reveal...
Vulnerabilities
A researcher at IOActive discovered that home security systems from SimpliSafe are plagued by a vulnerability that allows tech savvy burglars to remotely disable...
Endpoint Security
When companies want to acquire new customers, they seek out the fastest, most cost-effective ways to attract business. Online attackers take the same approach when...
Vulnerabilities
Researchers have discovered a serious remote code execution vulnerability in the GNU C Library, also known as glibc.glibc, the GNU Project’s implementation of the...
Vulnerabilities
Cybercriminals are exploiting an old vulnerability in the Magento ecommerce platform to compromise online shops and steal sensitive information, using a piece of malware...
Vulnerabilities
Mozilla released updates for the standard and ESR versions of Firefox last week to address vulnerabilities classified as having “critical” impact.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)