Vulnerabilities
Updates released by Apple on Wednesday address numerous vulnerabilities in Mac OS X, iOS, Safari and other products developed by the company.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Security researchers spotted a Google Chrome extension recently that may have leaked personal information belonging to more than a million users.
Vulnerabilities
A vulnerability that can be leveraged for arbitrary code execution has been found in a tool used for integrating industrial IP surveillance solutions developed...
Vulnerabilities
Researchers warn that the Pinterest and Yammer social networking applications for iOS fail to validate server certificates, allowing malicious actors to eavesdrop on users’...
Vulnerabilities
Mozilla has disabled the opportunistic encryption feature in its Firefox browser after a flaw was discovered in the browser's implementation of HTTP Alternative Services.
Vulnerabilities
A serious security flaw in BitTorrent Sync can be exploited by a remote attacker to execute arbitrary code, according to an advisory published over...
Vulnerabilities
A vulnerability discovered in Schneider Electric’s VAMPSET software can be exploited to execute arbitrary code on affected systems, ICS-CERT reported last week.The VAMPSET software...
Vulnerabilities
VMware has released updates and patches for several of its products in order to resolve vulnerabilities affecting the Java SE Runtime Environment (JRE).
Vulnerabilities
Cisco has addressed several denial-of-service (DoS) vulnerabilities in Cisco Unity Connection, the company’s unified messaging platform.The security holes affect Cisco Unity Connection version 10.0...
Vulnerabilities
Firefox 37, the latest version of Mozilla’s web browser, includes fixes for over a dozen security issues, including several vulnerabilities that have been rated...
Vulnerabilities
Some multicast Domain Name System (mDNS) implementations respond to unicast queries coming from outside the local link. A researcher has determined that this behavior...
Vulnerabilities
A researcher has identified a vulnerability in YouTube that could have been exploited by an attacker to delete any video from the Google-owned video...
Vulnerabilities
The PCI Security Standards Council has published new guidance to help organizations develop methodology for testing the security controls and processes protecting cardholder data.
Vulnerabilities
Schneider Electric has released software updates to address several vulnerabilities affecting the Wonderware InTouch Machine Edition 2014 and InduSoft Web Studio product lines.
Vulnerabilities
A serious security hole affecting a popular Internet gateway device used in hotels and convention centers has been closed.
Vulnerabilities
Researchers at High-Tech Bridge have uncovered multiple vulnerabilities in the Web interface of pfSense that can be exploited to perform cross-site scripting (XSS) and...
Vulnerabilities
Researchers at Imperva’s Application Defense Center have found a way to leverage a 13-year-old vulnerability in the RC4 cryptographic algorithm to recover partial information...
Vulnerabilities
Cisco has released security updates to address a total of 16 vulnerabilities affecting Cisco IOS and IOS XE software.Cisco IOS is an operating system...
Vulnerabilities
IT security solutions provider Secunia today published its annual vulnerability review. The report provides facts and details on the security flaws uncovered in 2014.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)