Vulnerabilities
A security researcher said he found a way to generate unlimited amounts of money on Starbucks gift cards. The coffee company doesn’t seem to...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Router manufacturers whose products have been confirmed to be affected by the recently disclosed NetUSB driver security flaw say they are working on developing...
Vulnerabilities
Emerson’s Process Management group has released a software update to address a SQL injection vulnerability in the Emerson AMS Device Manager product.
Vulnerabilities
Security questions are sometimes offered as an extra layer of protection for web users. Unfortunately new research shows they aren't quite as effective as...
Vulnerabilities
Researchers at Citizen Lab have analyzed the popular mobile web browser UC Browser and discovered that it’s plagued by some serious security and privacy...
Vulnerabilities
The recently disclosed Transport Layer Security (TLS) vulnerability dubbed Logjam affects numerous cloud services, cloud security company Skyhigh Networks reported on Wednesday.
Vulnerabilities
Apple released on Tuesday its first update for Watch OS, the iOS-based operating system that runs on the Apple Watch.Watch OS 1.0.1 patches a...
Vulnerabilities
Google announced on Tuesday that Chrome 43 is available for download. The latest release contains numerous improvements and fixes, including patches for a total...
Vulnerabilities
A serious vulnerability affecting the NetUSB kernel driver developed by Taiwan-based tech company KCodes exposes millions of routers to hack attacks, researchers have warned.According...
Vulnerabilities
The state of affairs when it comes to dealing with distributed denial-of-service attacks is not particularly rosy, according to Akamai Technologies' 'Q1 2015 State...
Vulnerabilities
The chief executive of United Airlines cast doubt Tuesday on claims by a security researcher about hacking the controls of a jetliner from its...
Vulnerabilities
Researchers at Fortinet's FortiGuard Labs have identified an arbitrary code execution vulnerability in IBM SPSS Statistics, the popular statistical analysis solution.
Vulnerabilities
Researchers have discovered address bar spoofing vulnerabilities in the Safari and Google Chrome for Android web browsers. Cybercriminals can exploit the bugs in phishing...
Vulnerabilities
A researcher who specializes in aircraft security admitted hacking into an airplane’s systems during a flight and successfully sending a climb command to one...
Vulnerabilities
Security Explorations has published details and proof-of-concept (PoC) code for several unconfirmed and unpatched vulnerabilities impacting Google App Engine for Java.
Vulnerabilities
Crowdstrike disclosed this week the existence of VENOM, a serious vulnerability affecting many virtualized environments.
Vulnerabilities
United Airlines has announced the launch of a bug bounty program, offering independent researchers who identify security holes in the company’s online services the...
Vulnerabilities
Cisco Finds Serious Flaws in TelePresence Products During Security ReviewsSoftware updates released by Cisco address several vulnerabilities in Cisco TelePresence products. The flaws have...
Vulnerabilities
Researchers at SEC Consult have identified some serious flaws in WSO2 Identity Server. The vendor has released patches to address the security bugs.WSO2 Identity...
Vulnerabilities
Perhaps it is not surprising that any time a critical new bug appears comparisons to other notorious bugs come soon after.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)