Vulnerabilities
Enterprise software maker SAP has released patches to address a series of high severity vulnerabilities affecting various products.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Adobe announced on Wednesday that it expects to release a patch for the recently disclosed Flash Player zero-day exploited in targeted attacks by a...
Vulnerabilities
Thousands of online shops powered by eBay’s Magento ecommerce platform could be vulnerable to hacker attacks due to a security hole in a popular...
Vulnerabilities
Google announced on Tuesday the release of Chrome 46, a version that patches several serious vulnerabilities and simplifies the security icon displayed for each...
Vulnerabilities
The six security bulletins released by Microsoft for October 2015 address more than 30 vulnerabilities affecting Windows, Internet Explorer, Edge, and Office.
Vulnerabilities
Updates released on Tuesday by Adobe for Flash Player, Reader and Acrobat address a significant number of vulnerabilities that expose the users of these...
Vulnerabilities
America’s Thrift Stores informed customers on Friday that their payment card details might have been stolen by a piece of malware planted on the...
Vulnerabilities
A vulnerability in HP SiteScope can be exploited by an attacker to execute arbitrary operating system commands, security firm Rapid7 has warned.HP SiteScope is...
Vulnerabilities
Kaspersky Lab has rolled out updates for its Internet Security and other products to address a design flaw that could have been exploited to...
Vulnerabilities
Amazon this week released a preview of Amazon Inspector, a new tool designed to analyze the behavior of applications deployed on its Amazon Web Services (AWS)...
Vulnerabilities
Microsoft has awarded a $24,000 bug bounty to a security researcher who uncovered a serious authentication vulnerability in the Live.com service.
Vulnerabilities
Adobe is preparing to patch a series of critical vulnerabilities affecting the company’s Reader and Acrobat products.
Vulnerabilities
A team of researchers has demonstrated that the cost of breaking the SHA1 cryptographic hash function is lower than previously estimated, which is why...
Mobile & Wireless
Google on Monday released a security update for Nexus devices, aimed at resolving recently disclosed critical security vulnerabilities the media playback engine in Android,...
Vulnerabilities
Cisco has announced a new and more streamlined format for disclosing security vulnerabilities in an effort to make it easier for network administrators to...
Vulnerabilities
The developers of the popular Jetpack plugin for WordPress have patched a critical vulnerability that allows malicious actors to attack website administrators.
Vulnerabilities
PRAGUE - Virus Bulletin 2015 - Gatekeeper, the security feature designed to protect OS X users against malware downloaded from the Internet, can be...
Vulnerabilities
PRAGUE - Virus Bulletin 2015 - An analysis of the vulnerabilities discovered in the systems of organizations in various industries provides some insight on...
Vulnerabilities
Vulnerabilities
A recently discovered vulnerability in cookies could enable an attacker to access private information from HTTPS sessions.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)