Vulnerabilities
It is no secret that enterprises sometimes have trouble keeping a handle on privileged users. In the wrong hands, excessive privileges can lead to...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Mozilla has released Firefox 36 updates to address the vulnerabilities presented by white-hat hackers at Pwn2Own 2015, the competition that took place last week...
Malware & Threats
Palo Alto Networks today shared details of a security vulnerability in the Android operating system that could allow an attacker to hijack the installation...
Vulnerabilities
An exploit for a Flash Player vulnerability patched recently by Adobe has already been integrated into at least two exploit kits, security firms reported.
Vulnerabilities
Some of the IP phones designed by Cisco for small businesses are plagued by a vulnerability that allows a remote attacker to eavesdrop on...
Vulnerabilities
Yoast has released a new version of its popular Google Analytics plugin for WordPress to address a persistent cross-site scripting (XSS) vulnerability that could...
Vulnerabilities
Multiple DLL hijacking vulnerabilities have been identified in a software component used in Rockwell Automation’s FactoryTalk View Studio and the FactoryTalk Services Platform.
Vulnerabilities
Facebook has addressed a serious vulnerability that could have been exploited by malicious applications to gain access to users’ private photographs.The security hole was...
M&A Tracker
Researchers at Dutch software security company Securify have identified a total of eight vulnerabilities in EMC M&R and EMC Secure Remote Services.
Vulnerabilities
Researchers who took part in the Pwn2Own 2015 hacking competition at the CanSecWest security conference have earned a total of $552,500, plus non-monetary prizes...
Vulnerabilities
Versions 6.35 and 7.35 of the Drupal content management system (CMS) are available for download. These security releases address two moderately critical vulnerabilities.One of...
Vulnerabilities
OpenSSL 1.0.2a, 1.0.1m, 1.0.0r, and 0.9.8zf have been released. The latest updates include fixes for several bugs and security issues.
Vulnerabilities
The first day of the Pwn2Own 2015 hacking competition has come to an end and the results are in. Participants have been awarded a...
Vulnerabilities
Last fall, the Gartner analyst firm predicted that through 2015, 75 percent of mobile applications would fail basic tests related to security and enterprise...
Vulnerabilities
HP has released software updates to address several vulnerabilities affecting ArcSight Enterprise Security Manager (ESM) and ArcSight Logger, products that are part of the...
Vulnerabilities
Researchers who identify vulnerabilities in Pinterest’s domains or mobile applications can now earn monetary rewards, the social media company has announced.
Vulnerabilities
The Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) has released a series of advisories detailing security issues identified by researchers in products from...
Vulnerabilities
Apple announced on Tuesday that is has addressed multiple security holes with the release of Safari 8.0.4, Safari 7.1.4, and Safari 6.2.4.
Vulnerabilities
Microsoft has blacklisted a fraudulent SSL certificate the company said could be used to spoof content and perform phishing and man-in-the-middle attacks.
Cybercrime
When it comes to cybersecurity, perhaps nothing has been as highly touted as the answer to every executive’s prayers as big data.Years after “big...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)