Vulnerabilities
Roughly one hundred websites were exposed to cross-site scripting (XSS) attacks because an XSS filter used on some of their web pages could have...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Researcher Finds Information Disclosure and Hardware Misconfiguration Flaws in ATMs Used by German Bank
Vulnerabilities
Google has paid out a $3,133.7 bounty to a researcher who identified a cross-site scripting (XSS) vulnerability on the recently launched YouTube Gaming website.YouTube...
Vulnerabilities
The Xen Project released on Thursday a total of nine advisories describing recently patched Xen hypervisor vulnerabilities.
Vulnerabilities
Adobe updated Shockwave Player on Tuesday to address a critical vulnerability that can be exploited for arbitrary code execution.
Vulnerabilities
Malicious actors started exploiting a Joomla vulnerability patched last week within hours after its details were disclosed.
Vulnerabilities
The United States Army should establish a central program for disclosing and managing software vulnerabilities plaguing the organization’s systems, according to a paper published...
Vulnerabilities
The developers of the popular content management systems (CMSs) Joomla and Drupal have released updates that address various types of security vulnerabilities.
Vulnerabilities
Swiss-based visualization and automation solutions provider iniNet Solutions GmbH has released updates to address several vulnerabilities identified by Positive Technologies researchers in some of...
Vulnerabilities
The Network Time Foundation’s NTP Project has released an update for the Network Time Protocol (NTP) to address a series of low and medium...
Vulnerabilities
A series of software updates released by Apple on Wednesday address tens of vulnerabilities in iOS, OS X, Safari, iTunes, Xcode, watchOS and OS...
Cybersecurity Funding
Crowdsourced security testing firm Synack has launched a new exploitation intelligence platform designed to offer companies an “adversarial perspective” of their digital assets.
Vulnerabilities
Updates released last week by Apple for its productivity apps address a series of vulnerabilities that can be exploited for denial-of-service (DoS) attacks, arbitrary...
Vulnerabilities
Oracle has patched a Java zero-day exploited by the Russia-linked advanced persistent threat (APT) group known as “Pawn Storm” in attacks aimed at NATO...
Vulnerabilities
Microsoft announced on Tuesday the launch of a new bug bounty program covering .NET core and ASP.NET Beta, which the company says are critical...
Vulnerabilities
Oracle’s Critical Patch Update (CPU) for October 2015, released on Tuesday, resolves a total of 154 vulnerabilities affecting tens of the company’s products.
Vulnerabilities
Researchers have uncovered several vulnerabilities in storage products from Western Digital and Seagate, and most of the identified flaws remain unpatched.Seagate Central Vulnerabilities
Vulnerabilities
HP has started releasing software updates for its ArcSight enterprise security management solution to address a series of vulnerabilities reported by researchers.
Vulnerabilities
Adobe has released Flash Player updates to address the zero-day vulnerability exploited by the Russia-linked Pawn Storm threat group in attacks aimed at Foreign...
Vulnerabilities
The developers of the Akismet plugin for WordPress have released an update to address a critical vulnerability that exposes websites to hacker attacks.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)