Malware & Threats
Much of today’s Web content—news, search, free email and collaboration tools, video sharing and social media—is paid for by advertising. Ads are an effective...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
The OpenSSL Project released on Thursday versions 1.0.2e, 1.0.1q, 1.0.0t and 0.9.8zh of the cryptographic software library to fix several security flaws and functionality...
Vulnerabilities
Early morning on our annual Thanksgiving pilgrimage I noticed a nontrivial number of cameras along our route on Interstate 95 as we were leaving...
Vulnerabilities
A security researcher has uncovered an easy-to-exploit vulnerability in the mobile version of the Yahoo! Mail website.Ibrahim Raafat discovered a persistent cross-site scripting (XSS)...
Vulnerabilities
Google announced on Tuesday the availability of Chrome 47, a version that brings 41 security fixes, including more than a dozen serious vulnerabilities reported...
Vulnerabilities
Researchers have identified several high severity vulnerabilities in the Videofied alarm system offered by RSI Video Technologies.
Vulnerabilities
Some Raspberry Pi devices are affected by a security issue stemming from the Raspbian operating system generating weak and predictable SSH keys.
Vulnerabilities
OpenSSL updates scheduled for release on December 3 will address several vulnerabilities, the OpenSSL Project announced on Monday.
Vulnerabilities
The developers of Node.js, the popular cross-platform runtime environment, this week will release security updates that patch a couple of vulnerabilities, one of which...
Vulnerabilities
Malicious hackers and pranksters could have hijacked billboard lighting systems by exploiting vulnerabilities found in a service provider’s mobile application.
Vulnerabilities
LinkedIn has disclosed the details of a recently patched clickjacking vulnerability that could have been exploited using CSS (Cascading Style Sheets) and style attributes.
Vulnerabilities
The developers of Zen Cart, the popular open source shopping cart software used by over one hundred thousand websites, have released patches for several...
Vulnerabilities
Millions of Internet-of-Things (IoT) devices use the same cryptographic secrets, an oversight that exposes them to various types of malicious attacks, shows a new...
Vulnerabilities
After news broke that Dell desktop and laptop computers include a self-signed root certificate that can be exploited for man-in-the-middle (MitM) attacks, experts found...
Vulnerabilities
Andrei Costin presents research findings on embedded web interfaces at the DefCamp security conference in Bucharest Romania. (Image Credit: SecurityWeek)
Vulnerabilities
Lenovo has released a new version of its System Update software to address a couple of privilege escalation vulnerabilities discovered by an IOActive researcher.Lenovo...
Vulnerabilities
A security researcher said it took United Airlines nearly six months to patch a serious vulnerability that could have been exploited to access customer...
Vulnerabilities
LinkedIn quickly addressed a persistent cross-site scripting (XSS) vulnerability found by a researcher earlier this week in the company’s official Help Center website.
Vulnerabilities
Exploit acquisition firm Zerodium is apparently trying to attract bug bounty hunters by making public the amounts of money it’s prepared to award for...
Vulnerabilities
VMware has released updates for several of its products to address an information disclosure issue caused by a vulnerability in Apache Flex BlazeDS.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)