Vulnerabilities
A team of researchers from Austria and France have demonstrated what they claim to be the first remote software-induced hardware fault attack. They have...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Network Security
This week’s cute OpenSSL vulnerability is CVE-2015-1793. This little one-line OpenSSL bug could allow an attacker who has a legitimate end-leaf certificate to circumvent...
Vulnerabilities
Crowdsourced security testing company Bugcrowd has released its inaugural “State of the Bug Bounty Report,” a study that provides a detailed analysis of the...
Vulnerabilities
A vulnerability in the Android mobile operating system can be exploited to cause devices to become inoperable, said researchers from Trend Micro.
Vulnerabilities
Nearly two years after it launched a bug bounty program, Yahoo says it has awarded researchers who reported security vulnerabilities a total of more...
Vulnerabilities
Commercial source code is more compliant with security standards than open source code, according to the 2014 Coverity Scan Open Source Report published on...
Vulnerabilities
Shellshock, the Bash bug disclosed in September 2014, is still being exploited by threat actors, according to a report from Solutionary’s Security Engineering Research...
Vulnerabilities
The Internet Systems Consortium (ISC) announced on Tuesday the release of BIND 9.10.2-P3 and BIND 9.9.7-P2. The updates for the popular Domain Name System...
Vulnerabilities
The Darkode cybercrime forum will return online soon. The news comes less than two weeks after law enforcement authorities announced that they had brought...
Vulnerabilities
A researcher has identified two vulnerabilities affecting Honeywell’s Tuxedo Touch automation controllers. The vendor has released a firmware update to patch the security holes.Honeywell...
Vulnerabilities
Enterprise mobile security firm Zimperium has identified a series of critical remote code execution vulnerabilities affecting the Android operating system. The company believes these...
Vulnerabilities
A vulnerability in the Steam password recovery feature allowed anyone to hijack accounts in just a few seconds. Valve patched the security hole, but...
Vulnerabilities
A researcher says he has identified several serious vulnerabilities in a PHP file manager application that is used by many high profile organizations.
Vulnerabilities
Researchers Charlie Miller and Chris Valasek have remotely hacked a Jeep by exploiting a vulnerability in the car’s in-vehicle connectivity system.
Vulnerabilities
Fiat Chrysler Automobiles (FCA) has decided to recall 1.4 million vehicles after security researchers revealed that cars equipped with the Uconnect in-vehicle connectivity system...
Vulnerabilities
Red Hat has patched two vulnerabilities related to the “libuser” library, which could be exploited by a local attacker to escalate privileges to root.
Vulnerabilities
The developers of the WordPress content management system (CMS) announced on Thursday the availability of WordPress 4.2.3. This security and maintenance release fixes a...
Vulnerabilities
HP this week shared the results of a security assessment revealing that virtually all smartwatches with network and communication functionality are vulnerable to cyberattacks.
Vulnerabilities
HP’s Zero-Day Initiative (ZDI) has disclosed four unpatched remote code execution vulnerabilities affecting Microsoft’s Internet Explorer web browser.ZDI said it revealed the existence of...
Vulnerabilities
A vulnerability in OpenSSH can be exploited to bypass the maximum number of authentication attempts and launch brute force attacks against a targeted server,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)