Vulnerabilities
A new report from Proofpoint's Nexgate research team found that many Fortune 100 companies are not doing a good job of policing compliance violations...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Today is the start of a busy time of patching courtesy of Microsoft and Adobe Systems.
Vulnerabilities
A honeypot set up by a researcher for monitoring attacks against a serious Elasticsearch vulnerability recorded roughly 8,000 exploitation attempts over the course of...
Vulnerabilities
Windows 10 may be on the way, but many organizations are still stuck deep in the past when it comes to using versions of...
Vulnerabilities
The developers of MacKeeper, the controversial utility software suite for OS X, have patched a critical vulnerability that could have been exploited to remotely...
Vulnerabilities
On Tuesday, May 12, Adobe will release security updates to address critical vulnerabilities discovered in Adobe Reader and Adobe Acrobat for Windows and Mac.
Vulnerabilities
Rockwell Automation has produced software updates to address a buffer overflow vulnerability affecting a component of the RSLinx Classic solution.RSLinx Classic is a comprehensive...
Vulnerabilities
WordPress 4.2.2 was released on Thursday to address a serious DOM-based cross-site scripting (XSS) vulnerability that has been actively exploited.
Vulnerabilities
Cisco has released updates to address a serious vulnerability in the Cisco Unified Computing System (UCS) Central software that can be exploited by remote...
Vulnerabilities
Updates released by Apple on Wednesday for the Safari web browser address several security holes, including ones that could lead to arbitrary code execution.
Vulnerabilities
Lenovo has patched critical flaws in its computers that allow an attacker to compromise the System Update service.
Vulnerabilities
Malicious actors are actively exploiting a DOM-based cross-site scripting (XSS) vulnerability that could potentially affect a large number of WordPress plugins and themes, Sucuri...
Vulnerabilities
Security firm IOActive has published an advisory detailing some vulnerabilities in electronic locks from CyberLock. The lock maker is not happy about it and...
Vulnerabilities
Researchers have identified several critical vulnerabilities in Hospira LifeCare patient-controlled analgesia (PCA) infusion systems, which can be exploited by a remote attacker to take...
Vulnerabilities
Researchers have identified several ways to bypass Password Alert, an anti-phishing extension for Chrome launched last week by Google. The search giant has started...
Funding/M&A
Rapid7, a Boston, Mass.-based provider of security analytics software and services, announced on Monday that it has acquired application security testing company NT OBJECTives...
Vulnerabilities
PayPal’s Partner Program website (paypal-marketing.com) was plagued by a vulnerability that could have been exploited for remote code execution.
Vulnerabilities
MySQL, Oracle’s relational database management system, is plagued by a vulnerability that can be exploited to downgrade SSL/TLS connections, according to researchers at Duo...
Vulnerabilities
A researcher has identified two arbitrary code execution vulnerabilities in industrial control and automation software products developed by Opto 22. The vendor has released...
Vulnerabilities
The Internet Corporation for Assigned Names and Numbers (ICANN) announced on Thursday the completion of the first phase of its investigation into the impact...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)