Vulnerabilities
The first security advisory published by VMware in 2016 describes an important guest privilege escalation vulnerability in VMware Tools.VMware Tools includes utilities designed to...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
The first series of security updates released by Adobe in 2016 will be for the company’s Acrobat and Reader products.
Vulnerabilities
The developers of the WordPress content management system (CMS) have released a security and maintenance update to address a vulnerability and dozens of non-security...
Vulnerabilities
The details of several vulnerabilities in the update process of the Drupal content management system (CMS) were disclosed on Wednesday by a security firm.
Malware & Threats
Security researchers have observed an increase in exploit kit (EK) activity in the beginning of this year, coupled with a series of mutations, which...
Vulnerabilities
The owners of more than 1,500 Juniper Networks firewalls still haven’t applied patches designed to address recently discovered backdoors, an Internet scan conducted by...
Vulnerabilities
A vulnerability in Comcast’s Xfinity Home Security system could allow thieves to break into homes without triggering the alarm, researchers have warned.
Mobile & Wireless
Google on Monday released the latest set of updates for its Android operating system (OS), including fixes for five critical security vulnerabilities found in...
Vulnerabilities
Exploit acquisition firm Zerodium is offering up to $100,000 to anyone who can provide an exploit for bypassing the Flash Player heap isolation mitigation...
Cybercrime
Computers and mobile devices might be the main targets for cybercriminals at the moment, but the fast expanding Internet of Things (IoT) market is...
Vulnerabilities
Apple’s desktop and mobile operating systems are at the top of the list when it comes to the number of distinct vulnerabilities that have...
Vulnerabilities
Verizon says it has patched an information disclosure vulnerability identified by a researcher on the company’s Hum website.
Vulnerabilities
A Chrome extension that AVG AntiVirus automatically installs on users’ systems exposes browsing history and other personal data to the Internet, Google Project Zero...
Vulnerabilities
Adobe released an out-of-band security update on Monday to address multiple vulnerabilities rated as critical in its Flash Player, including one (CVE-2015-8651) that is...
Vulnerabilities
Symantec has detected up to 20,000 daily attempts to exploit a recently patched Joomla vulnerability that can be leveraged for remote code execution.
Vulnerabilities
Researchers at Swiss-based security firm High-Tech Bridge have identified serious vulnerabilities in several popular web applications.
Application Security
A rite of passage for new parents is child-proofing—securing the home from threats to children. Most experts on the subject highly recommend that parents...
Network Security
Cybersecurity Funding
Google has announced plans to dedicate $1,000,000 to fund grants for independent security research in 2016.
Vulnerabilities
Boston-based security tools maker Rapid7 said on Thursday that the latest version of its AppSpider web application security testing solution can now automate the testing...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)