Vulnerabilities
The PCI Security Standards Council (PCI SSC) has released the latest version of the PCI Data Security Standard (PCI DSS) with an eye towards...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
D-Link has failed to properly fix vulnerabilities affecting several router models, according to a researcher. The networking equipment manufacturer says it’s currently working on...
Vulnerabilities
A high severity vulnerability has been found in Cache Cleaner, a Cisco Secure Desktop component that was deprecated by the company more than two...
Vulnerabilities
Google has patched a vulnerability in YouTube that could have been exploited to copy any comment from one video to another, researchers revealed on...
Vulnerabilities
Dropbox is the latest major company to turn to the power of the hacker community in an effort to ensure that its services are...
Vulnerabilities
Two hundred and ninety-five – that is the combined total of days attackers were actively exploiting the five most targeted zero-days last year before...
Vulnerabilities
Various types of vulnerabilities have been identified in SearchBlox, the enterprise search solution built on top of Apache Lucene/Solr and Elasticsearch.
Vulnerabilities
Oracle released a security update with a whopping 98 fixes, including 17 for Oracle Fusion Middleware and 26 for Oracle MySQL.
Mobile & Wireless
Researchers from security consultancy Bishop Fox have discovered a flaw in the popular Android app AirDroid that allows a remote attacker to secretly take...
Vulnerabilities
Google announced on Tuesday the availability of Chrome 42 for Windows, Mac and Linux. The latest release addresses a total of 45 security issues...
Vulnerabilities
Microsoft released 11 security bulletins today to address vulnerabilities in a number of products, including a critical Office bug being exploited in the wild.
Vulnerabilities
HP has patched a vulnerability in the HP Support Solution Framework that can be exploited by a remote attacker to deliver arbitrary files and...
Vulnerabilities
Compliance may be a key focus of the healthcare industry, but that hasn't always translated into secure environments.
Identity & Access
"Re-Direct to SMB" Vulnerability Allows Attackers to Gain Access to Login Credentials Researchers from security firm Cylance have disclosed a security flaw which impacts...
Vulnerabilities
Facebook has decided not to reward a researcher who has identified a vulnerability in one of the software components used on the official blog...
Vulnerabilities
Researchers have identified three vulnerabilities in Siemens’ SIMATIC HMI devices. The German engineering giant has started releasing software updates to address the security holes...
Vulnerabilities
In early October 2014, a researcher discovered a serious privilege escalation vulnerability in Apple’s Mac OS X operating system. The flaw, which has been...
Vulnerabilities
Open source software management firm Black Duck Software has launched a new solution that helps security and development teams find and remediate security vulnerabilities...
Vulnerabilities
The education sector may have some tough lessons to learn when it comes to IT security.
Vulnerabilities
Cisco informed customers on Wednesday that it has released software updates to address several high severity vulnerabilities affecting Cisco Adaptive Security Appliance (ASA) products.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)