Mobile & Wireless
Apple on Tuesday patched multiple security flaws in iOS, OS X, and Safari, including a Cookie Stores vulnerability in iOS that was initially reported in...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Google on Wednesday announced the availability of Chrome 48, a browser release that brings along 37 patches for various security vulnerabilities, including 8 that...
Vulnerabilities
Apple has released a series of updates for the iOS and OS X platforms, aimed at resolving a series of security vulnerabilities in both...
Vulnerabilities
A new version of Intel’s Driver Update Utility released on Tuesday patches an information disclosure flaw identified by researchers at Core Security.The Intel Driver...
Vulnerabilities
Oracle Critical Patch Update For January 2016 Addresses 248 Vulnerabilities Oracle’s Critical Patch Update (CPU) for January 2016 was released on Tuesday and brings...
Vulnerabilities
A local privilege escalation vulnerability introduced in the Linux kernel in 2012 exposes tens of millions of Linux PCs and servers, and roughly two-thirds...
Vulnerabilities
A researcher has been awarded $10,000 for responsibly disclosing a stored cross-site scripting (XSS) vulnerability in the web version of the Yahoo! Mail service.
Vulnerabilities
The developers of OpenSSH, a popular implementation of the Secure Shell (SSH) protocol, today announced the availability of an update that patches several security...
Vulnerabilities
One of the vulnerabilities patched by Microsoft on Tuesday with the first round of security bulletins for 2016 was a Silverlight zero-day which Kaspersky...
Vulnerabilities
Enterprise software maker SAP on Tuesday released a new set of security updates for its products in its SAP Security Patch Day for January...
Vulnerabilities
Mozilla has awarded a researcher $2,500 for responsibly disclosing a stored cross-site scripting (XSS) vulnerability affecting the company’s add-ons website.
ICS/OT
Many consumer-grade Internet of Things (IoT) products, such as Wi-Fi security web cameras, include security flaws that allow attackers to reprogram them and use...
Vulnerabilities
A security hole affecting older versions of Fortinet’s FortiOS operating system allows attackers to gain unauthorized access to vulnerable devices, but the vendor says...
Vulnerabilities
In its first Patch Tuesday update of 2016, Microsoft released nine updates to address vulnerabilities across various products, which exploitation of some could allow...
Vulnerabilities
As announced last week, Adobe has released its first series of security updates for 2016 to patch vulnerabilities affecting the company’s Acrobat and Reader...
Vulnerabilities
A reflected cross-site scripting (XSS) vulnerability on eBay’s website could have been exploited by malicious actors for phishing attacks, a researcher has demonstrated.
Vulnerabilities
General Motors launched a vulnerability disclosure program last week, but the carmaker is currently not offering any rewards.The carmaker has invited researchers who find...
Vulnerabilities
The developers of the Drupal content management system (CMS) have started patching the update process vulnerabilities disclosed recently by security firm IOActive.
Malware & Threats
Smart TVs running the Android operating system provide users with functionality beyond that of normal TVs, but they also create a security risk, Trend...
Vulnerabilities
Microsoft Ends Life of Internet Explorer 8, 9, 10 Microsoft’s Internet Explorer 8, 9, and 10 will reach End of Life (EOL) status as...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)