Vulnerabilities
D-Link has released firmware updates to address serious security holes affecting the company’s DCS-93xL IP cameras and the DAP-1320 wireless range extender.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Cloud security and compliance solutions provider Qualys today announced the availability of free assessment APIs and a new tool that enable SSL Labs users...
Vulnerabilities
The number of servers affected by the recently disclosed FREAK bug has decreased considerably over the past couple of weeks, but researchers have determined...
Malware & Threats
Microsoft has released version 5.2 of its Enhanced Mitigation Experience Toolkit (EMET), which offers increased security protections in several areas, including code hijacking attacks...
Vulnerabilities
DLL hijacking is not just a Windows thing: it turns out that a conceptually similar attack is possible for OS X systems.
Vulnerabilities
IBM today released the 2015 IBM X-Force Threat Intelligence Quarterly, a report that details the security incidents, financial malware trends, risky Android apps, and...
Vulnerabilities
A recent report from the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) shows that while ICS vendors have been targeted by various types...
Vulnerabilities
The developers of WPML have released an update to address several security issues that can be exploited to access website databases, delete content, and...
Vulnerabilities
Energy management company Schneider Electric has released a patch to address a serious vulnerability affecting Pelco DS-NVs, a video management software used worldwide in...
Vulnerabilities
Adobe has released security updates to patch nearly a dozen serious vulnerabilities affecting the Windows, Mac and Linux versions of Flash Player.
Vulnerabilities
Cisco has released software updates to address vulnerabilities affecting the Cisco Intrusion Prevention System (IPS), TelePresence Video Communication Server (VCS), Expressway, and TelePresence Conductor.
Cybercrime
Hackers build attacks on a huge treasure-trove of existing vulnerabilities, and they find new ways to exploit new technologies like mobile and the Internet...
Vulnerabilities
With the release of Android 5.1 Lollipop, Google has addressed two serious vulnerabilities that can be exploited for privilege escalation.The flaws, which affect all...
Vulnerabilities
The WordPress SEO by Yoast plugin is plagued by a blind SQL injection vulnerability that can be exploited to execute arbitrary SQL queries on...
Vulnerabilities
Financial services and communications company Western Union has launched a public bug bounty program via the Bugcrowd platform. Researchers who identify serious security issues...
Mobile & Wireless
IBM researchers discovered a flaw in Dropbox's Android SDK which can leave mobile users vulnerable to attack.
Vulnerabilities
One of the security bulletins released by Microsoft on Tuesday addresses a vulnerability that should have been patched since August 2010.
Vulnerabilities
Microsoft released a fix for the FREAK vulnerability today as part of a massive Patch Tuesday security update.
Vulnerabilities
Seagate has confirmed the existence of vulnerabilities in Business Storage 2-Bay NAS devices and promised to patch the issues in May.However, the company has...
Vulnerabilities
A security researcher has released a tool that allows hackers to hijack accounts on sites that use Facebook logins.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)