Vulnerabilities
Researchers at High-Tech Bridge have identified several vulnerabilities in TheCartPress, an eCommerce plugin installed on more than 5,000 WordPress websites.According to experts, the plugin...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Experts discovered that the password recovery feature on the website of Betfair, one of the world's largest online betting exchanges, was plagued by some...
Vulnerabilities
Barracuda Networks has released a firmware update for its Barracuda Web Filter solution to address a couple of SSL inspection flaws reported by Will...
Vulnerabilities
Sixteen days might as well be a lifetime when it comes to the length of time an infection persists on a network.
Vulnerabilities
Routers from D-Link, TRENDnet and likely other vendors are vulnerable to remote code execution attacks due to a flaw in a component of the...
Vulnerabilities
Network-connected projectors developed by InFocus are affected by vulnerabilities that allow a remote attacker to gain unauthorized access to the device’s web interface and...
Vulnerabilities
WordPress 4.2.1 was released on Monday to address a critical zero-day vulnerability disclosed on Sunday by Finnish researcher Jouko Pynnönen of Klikki Oy. The...
Vulnerabilities
German journalist and researcher Hanno Böck has analyzed three popular antivirus products and determined that each one of them lowers security when they intercept...
Vulnerabilities
A researcher has found a way to execute arbitrary JavaScript code on WordPress websites by leveraging a stored cross-site scripting (XSS) bug related to...
Vulnerabilities
German business software company SAP has patched a vulnerability in SAP Adaptive Server Enterprise (ASE) that allows an unauthorized user to access the database...
Vulnerabilities
Malicious actors are attempting to hijack online shops by exploiting a recently disclosed critical vulnerability in Magento, the popular e-commerce platform owned by eBay.
Vulnerabilities
Researchers have identified a vulnerability in wpa_supplicant, the popular Wi-Fi Protected Access (WPA) supplicant for Linux, BSD, Mac OS X, Windows, and various other...
Vulnerabilities
Microsoft announced on Wednesday that it’s extending its bug bounty program to include Project Spartan, the codename used for the new web browser included...
Vulnerabilities
Apple’s recent fix for the OS X privilege escalation vulnerability dubbed “rootpipe” isn’t effective, according to researchers.
Vulnerabilities
HP has released updates to address several remotely exploitable vulnerabilities in HP Network Automation.
Vulnerabilities
Malicious Hackers Can Exploit a Vulnerability in Magento to Access Credit Card DataResearchers have identified a serious vulnerability in Magento, the popular e-commerce platform...
Vulnerabilities
A security researcher was questioned by the FBI and banned from boarding a plane after he posted a message on Twitter about hacking into...
Vulnerabilities
Mojang Patches Bug After Exploit Is Made Public
Vulnerabilities
SANS Institute researchers advise system administrators to update their Windows operating systems as soon as possible because one of the critical vulnerabilities patched by...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)