Vulnerabilities
Japan-based industrial automation and control company Yokogawa Electric has started releasing patches to address three critical vulnerabilities affecting many of the company’s industrial control...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Cisco has revealed the existence of denial-of-service (DoS) vulnerabilities in several of its security products. Customers are advised to apply workarounds since software updates...
Cybersecurity Funding
Argus Cyber Security Raises $26 Million in Series B Funding Round To Help Protect Vehicles From Cyber Attacks
Vulnerabilities
Network attached storage (NAS) company Synology has released updates for its Video Station and Download Station applications to patch several vulnerabilities identified by Dutch...
Vulnerabilities
Germany-based enterprise software maker SAP has addressed a total of twenty vulnerabilities as part of its September 2015 Security Patch Day.In addition to fixing...
Vulnerabilities
Enterprise mobile security firm Zimperium has published an exploit for one of the most critical Android Stagefright vulnerabilities disclosed this summer.
Vulnerabilities
The number of publicly disclosed vulnerabilities affecting industrial control systems (ICS) has increased considerably since the Stuxnet attack, shows a report published on Wednesday...
Vulnerabilities
Adobe has released an updated version of its popular Shockwave Player for Windows to resolve two critical vulnerabilities newly discovered in the product.
Vulnerabilities
Microsoft has released a dozen security bulletins to patch more than 50 vulnerabilities affecting Windows, Internet Explorer, Edge, Office, Lync, Exchange Server, .NET Framework,...
Vulnerabilities
A researcher has published proof-of-concept (PoC) code for a total of seven zero-day vulnerabilities affecting Advantech’s WebAccess software.
Network Security
NETGEAR has released a firmware update to address a vulnerability in its WMS5316 ProSafe 16AP Wireless Management System that could result in authentication bypass...
Vulnerabilities
A vulnerability discovered in WhatsApp Web, the web-based extension of the WhatsApp mobile application, can be exploited by attackers to trick users into executing...
Vulnerabilities
Avira and Webroot have updated their mobile security applications for iOS to address vulnerabilities that could have been exploited in man-in-the-middle (MitM) attacks.
Vulnerabilities
Kaspersky Lab has pushed out an update to address a serious antivirus vulnerability reported over the weekend by a Google security engineer.
Vulnerabilities
An unpatched vulnerability affecting PayPal’s mobile applications can be exploited to access restricted accounts and even bypass the two-factor authentication (2FA) mechanism, a researcher...
Vulnerabilities
Fiat Chrysler Automobiles (FCA) wants to update the software on roughly 7,810 of its SUVs to address an issue that can be exploited to...
Vulnerabilities
An attacker had access to a privileged account on Mozilla’s Bugzilla bug tracker for at least a year and is believed to have accessed...
Vulnerabilities
Schneider Electric has released firmware patches to address a couple of vulnerabilities affecting some of the company’s Modicon programmable logic controller (PLC) products.
Vulnerabilities
Vulnerabilities Found in OrientDB Patched by Developer
Vulnerabilities
Cisco has released software updates to patch a remotely exploitable vulnerability affecting the company’s UCS Director and Integrated Management Controller (IMC) Supervisor products.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)