Vulnerabilities
Siemens has released software and firmware updates to address vulnerabilities identified in several of the company’s products.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Google has updated the stable channel of Chrome to version 44.0.2403.89. In addition to new features, which Google plans to detail these days, the...
Vulnerabilities
Researchers have identified a local privilege escalation (LPE) vulnerability in the Mac OS X operating system. Apple seems to be aware of the security...
Vulnerabilities
Two security researchers have demonstrated that in-vehicle connectivity systems can be hacked, allowing remote attackers to take full physical control of a car.
Vulnerabilities
Nearly 30,000 MongoDB instances are accessible over the Internet without any authorization enabled, an expert has warned.
Vulnerabilities
Out-of-Band Security Patch Fixes Critical OpenType Font Driver Vulnerability Affecting All Versions of Microsoft Windows
Vulnerabilities
Power management solutions provider Eaton has released software updates to address a vulnerability affecting the Cooper Power Series Form 6 recloser control and Idea/IdeaPLUS...
Vulnerabilities
Microsoft on Tuesday patched several memory corruption vulnerabilities in Office, including one that had been exploited in the wild by a well known advanced...
Vulnerabilities
A security bug that can be exploited for denial-of-service (DoS) attacks has been found in Cisco Videoscape Distribution Suite for Internet Streaming (VDS-IS) and...
Vulnerabilities
Siemens has released a firmware update for SICAM MIC devices in order to patch a serious vulnerability reported to the company by an external...
Vulnerabilities
Researchers Exploit RC4 Flaws in NOMORE Attacks Against Real DevicesResearchers have demonstrated that attacks against the RC4 cryptographic algorithm are becoming more practical and...
Vulnerabilities
Oracle on Tuesday released its July 2015 Critical Patch Update (CPU). The updates address a whopping 193 security issues across multiple product families, including...
Vulnerabilities
Microsoft has released a total of 14 bulletins as part of the company’s July 2015 security updates. The updates address vulnerabilities in Windows, Office,...
Vulnerabilities
Adobe Releases Security Updates for Flash Player, Acrobat, Reader, Shockwave Player
Vulnerabilities
Cloud-based IT management and security solutions provider Kaseya has released software updates to address several vulnerabilities identified by a researcher in the company’s Virtual...
Vulnerabilities
PHP 5.6.11, 5.5.27 and 5.4.43 were released last week. The latest versions of the popular scripting language address numerous functionality bugs and several security...
Vulnerabilities
A notorious cyber espionage group has been using a Java zero-day exploit in attacks aimed at the armed forces of a NATO member country...
Vulnerabilities
Researchers have identified exploits for two new Adobe Flash Player zero-day vulnerabilities in the Hacking Team leak. Adobe has promised to patch the newly...
Vulnerabilities
VMware has released software updates for several of its products to address a vulnerability that can be exploited to elevate privileges and execute arbitrary...
Vulnerabilities
A security bug in a backup mechanism of the Android operating system can be exploited to install malicious apps on vulnerable devices, researchers have...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)