Vulnerabilities
Apple has patched a total of nine vulnerabilities with the release of QuickTime 7.7.8 for Windows.According to an advisory published by Apple last week,...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
A researcher has advised customers of the Dolphin and Mercury web browsers for Android to switch to other applications after identifying a series of...
Vulnerabilities
A researcher says BMW was informed of the mobile app vulnerability that allows hackers to locate and unlock cars months before the attack method...
Vulnerabilities
DENIC and Nic.at, the country code Top Level Domain (ccTLD) registry operators for Germany’s .de and Austria’s .at domains, have been accused of failing...
Vulnerabilities
The developers of Drupal, the open source content management system (CMS) currently used by more than 1.1 million websites, have address several security issues...
Vulnerabilities
iOS Sandbox Vulnerability Puts Enterprises at RiskOrganizations using mobile device management (MDM) solutions are exposed to cyberattacks due to a vulnerability uncovered by researchers...
Vulnerabilities
Adobe has released a security hotfix to address an XML External Entity (XXE) vulnerability in LiveCycle Data Services (DS).Adobe LiveCycle Data Services is a...
Vulnerabilities
Microsoft issued an emergency out-of-band update on Tuesday to fix a critical vulnerability (CVE-2015-2502) being actively exploited in the wild and affecting all versions...
Vulnerabilities
Trend Micro mobile threat response engineer Wish Wu has identified a new Android vulnerability caused by an issue in the mobile operating system’s mediaserver...
Vulnerabilities
Researchers identified a vulnerability in the Google Admin application for Android that could have been exploited to read arbitrary files from the app’s sandbox....
Vulnerabilities
A researcher has published a proof-of-concept (PoC) exploit for a local privilege escalation vulnerability affecting OS X Yosemite, including the latest 10.10.5 version.
Vulnerabilities
In a previous column, I discussed how “cyberphysical” is an appropriate term to capture this new world we are entering, where machines operate automatically...
Vulnerabilities
Malicious actors can exploit vulnerabilities in BitTorrent, the popular peer-to-peer (P2P) file sharing protocol, to launch distributed reflective denial-of-service (DRDoS) attacks, researchers warned at...
Vulnerabilities
A group of Georgia Tech researchers have been awarded $100,000 by Facebook for coming up with a novel technique for detecting bad casting vulnerabilities.
Vulnerabilities
Mary Ann Davidson, Oracle's Chief Security Officer, published a blog post titled “No, You Really Can’t” on Monday asking customers to stop performing their...
Vulnerabilities
A patch released by Google for one of the recently disclosed Stagefright vulnerabilities affecting the Android mobile operating system is flawed, researchers have warned.
Vulnerabilities
Apple Releases Security Updates for OS X, iOS, Safari, OS X ServerApple released on Thursday security updates for OS X, iOS, Safari and OS...
Vulnerabilities
Researchers have once again demonstrated that when it comes to securing data, configuration issues can be just as dangerous as vulnerabilities.
Vulnerabilities
Germany-based enterprise software maker SAP has released patches for a total of 22 vulnerabilities as part of its August 2015 Security Patch Day.
Cyber Insurance
Small devices installed in many automobiles allow remote attackers to hack into a car’s systems and take control of various functions, researchers have demonstrated.Researchers...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)