Vulnerabilities
Adobe has released security updates and hotfixes to address vulnerabilities in Flash Player, Photoshop, Bridge, Connect, and Experience Manager.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Vulnerabilities identified by researchers at Cisco’s Talos group in smart thermostats made by Trane allow malicious hackers to gain complete control of the devices.
Vulnerabilities
Git repository hosting service GitHub announced last week that it has paid out nearly $100,000 to researchers who have contributed to making the platform...
Vulnerabilities
Oracle has released updates for Java 6, 7 and 8 to address a high severity vulnerability that can be exploited by a remote, unauthenticated...
Application Security
Success Comes From Changing Your Habits to Make the Commitment to Secure Software a Lifestyle
Vulnerabilities
Microsoft on Tuesday announced that the latest version of its Enhanced Mitigation Experience Toolkit (EMET) includes Windows 10 compatibility, and brings several other enhancements.
Vulnerabilities
Security firm Check Point reported on Tuesday that it identified a serious vulnerability in eBay that can be exploited for malware and phishing attacks,...
Vulnerabilities
The developers of the popular content management system WordPress announced on Tuesday the availability of version 4.4.2, a release that patches a couple of...
Vulnerabilities
In an effort to encourage researchers to responsibly disclose security flaws found in its products, anti-malware company Malwarebytes announced on Monday the launch of...
Vulnerabilities
A researcher has earned a significant bounty after finding a serious cross-site scripting (XSS) vulnerability that could have allowed malicious hackers to take over...
Vulnerabilities
It took the developers of OpenSSL just over two weeks to patch a high severity vulnerability that allows attackers to obtain information that could...
Vulnerabilities
LG today released a security update for some of its latest smartphones to resolve a severe vulnerability found in the Smart Notice application.
Mobile & Wireless
Samsung has released a maintenance update for its major Android flagship Galaxy models to resolve 16 vulnerabilities in these devices.
Vulnerabilities
IE, Windows UMC Vulnerabilities Fueled Microsoft's 2015 Patch Efforts
Network Security
Firefox 44, the latest version of Mozilla’s web browser, is now available for download and comes with a series of security patches, and has...
Vulnerabilities
Misconfigured enterprise printers can be abused by malicious actors to store malicious code and evade detection, a researcher has warned.
Vulnerabilities
Lenovo has released updates for the Windows and Android versions of its SHAREit application to address a series of vulnerabilities reported by researchers at...
Vulnerabilities
The developers of the popular e-commerce platform Magento released a security update last week to patch more than 20 vulnerabilities, including ones that could...
Vulnerabilities
The OpenSSL Project announced today that upcoming releases of the cryptographic software library will address two security flaws.
Vulnerabilities
Google has released a patch for Android to address a Linux kernel vulnerability disclosed earlier this week by Perception Point, but the search giant...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)