Vulnerabilities
The developers of the Angler exploit kit have added support for a recently patched Internet Explorer vulnerability.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Researchers at IBM have identified vulnerabilities that can be exploited by malicious Android applications to escalate privileges, allowing cybercriminals to take control of affected...
Vulnerabilities
LAS VEGAS - DEF CON 23 - Shortly after researchers disclosed a series of vulnerabilities found in Tesla Model S, the electric car maker...
Vulnerabilities
Use of SSL Prevents Hackers from Abusing Windows Server Update Services (WSUS)LAS VEGAS - BLACK HAT USA 2015 - Organizations that fail to configure...
Vulnerabilities
Las Vegas - The Uber badge awarded to champion hackers at Def Con here in Las Vegas has a certain glow. That's because it's...
Vulnerabilities
Las Vegas - A dive into a gun-loving side of US culture by a pair of computer security researchers led them to hack into...
Vulnerabilities
Mozilla updated Firefox to version 39.0.3 on Thursday to address a critical vulnerability that has been exploited in the wild.
Vulnerabilities
Hackers on Thursday showed how to turn the latest model Square mobile payments readers into crime tools.
Vulnerabilities
Microsoft announced on Wednesday new changes and further expansion of its bug bounty programs.The company has decided to separate its Mitigation Bypass and Bounty...
Vulnerabilities
The Internet Corporation for Assigned Names and Numbers (ICANN) has issued another security warning after login credentials for the ICANN.org website were compromised.
Mobile & Wireless
Samsung to Deliver Regular Security Updates Around Once a Month to Android-based Galaxy Devices
Vulnerabilities
Flaws in Symantec Endpoint Protection Could Allow Hackers to Compromise Corporate Networks
Vulnerabilities
Researchers at Trend Micro have reported finding a second denial-of-service (DoS) vulnerability in Android’s “mediaserver” component.
Vulnerabilities
The developers of the WordPress content management system (CMS) today announced the release of version 4.2.4. This security release addresses six vulnerabilities and four...
Vulnerabilities
Researchers at RSA have conducted an in-depth analysis of a Chinese virtual private network (VPN) service that has been used by advanced persistent threat...
Vulnerabilities
A critical denial-of-service (DoS) vulnerability in the Domain Name System (DNS) software BIND is being exploited in the wild, researchers have warned.
Vulnerabilities
The Xen Project has released patches to address two vulnerabilities affecting the Xen virtualization software.
Vulnerabilities
The U.S. Food and Drug Administration (FDA) issued an alert on Friday to warn healthcare organizations about the cyber security risks associated with the...
Vulnerabilities
Fingerprint access controllers developed by Taiwan-based Chiyu Technology are plagued by a vulnerability that could allow hackers to make it easier to open the...
Vulnerabilities
Cisco has released software updates to address a high severity denial-of-service (DoS) vulnerability affecting Cisco ASR 1000 Series Aggregation Services Routers.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)