Vulnerabilities
Google has announced the launch of a bug bounty program for Android. Researchers who report serious vulnerabilities affecting the mobile operating system can earn...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Updates released by Retrospect, Inc. for its cross-platform backup and recovery software address numerous bugs, including a password hashing weakness that puts users’ files...
Vulnerabilities
Canonical has released updates for Ubuntu to address a local root privilege escalation vulnerability that can be exploited to gain administrative privileges on the...
Vulnerabilities
Officials at password manager LastPass revealed the company has been compromised in a data breach.
Vulnerabilities
Cisco has released updates for its IOS XR network operating system to address a vulnerability that can be exploited to cause a denial-of-service (DoS)...
Vulnerabilities
The Forum of Incident Response and Security Teams (FIRST) announced this week the availability of version 3 of the Common Vulnerability Scoring System (CVSS).
Vulnerabilities
Red Lion Controls is preparing a firmware update to address a vulnerability in the N-Tron 702-W Industrial Wireless Access Point that can be exploited...
Vulnerabilities
Recent versions of the content management system (CMS) Concrete5 address several vulnerabilities, including security holes reported by Italy-based researcher Egidio Romano of Minded Security.
Vulnerabilities
OpenSSL versions 1.0.2b, 1.0.1n, 1.0.0s and 0.9.8zg have been released. The latest versions of the open-source toolkit for SSL/TLS address several moderate and low...
Vulnerabilities
Mozilla Has Announced the Launch of a Bug Bounty Hall of FameResearchers who responsibly disclose vulnerabilities found in Firefox can now earn more than...
Vulnerabilities
The email client shipped with Apple’s iOS mobile operating system is plagued by a vulnerability that can be exploited to load remote arbitrary HTML...
Vulnerabilities
VMware has released software updates to address several security flaws affecting some of the company’s products.
Vulnerabilities
CUPS has been updated to address a couple of security bugs that can be exploited by a malicious actor to elevate privileges and execute...
Vulnerabilities
Microsoft released eight security bulletins today as part of this month's Patch Tuesday, including two critical updates for Windows and Internet Explorer.
Vulnerabilities
A researcher who has analyzed the software installed on infusion pumps manufactured by Hospira says several models are plagued by the vulnerabilities disclosed earlier...
Vulnerabilities
Patch management - two words that are vital to cybersecurity, but that rarely generate enough attention.
Vulnerabilities
ICS-CERT has published an advisory detailing a cross-site request forgery (CSRF) vulnerability found in 442SR wind turbines produced by Wilsonville, OR-based wind energy solutions...
Vulnerabilities
Malicious actors have been leveraging medical devices deployed in hospitals as key pivot points within the targeted institutions’ networks. Since threats are not easily...
Vulnerabilities
A serious vulnerability in Unity Web Player can be exploited by malicious actors to steal sensitive information from users, a researcher has warned.Unity is...
Vulnerabilities
The Drupal security team announced this week that it’s prepared to offer up to $1,000 for vulnerabilities found in Drupal 8, the latest version...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)