Vulnerabilities
Apple Patches Several Flaws in iOS, OS X, Apple TV and XcodeApple has released updates to address several security flaws, including the recently disclosed...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Researchers at Google’s Project Zero have demonstrated that a recently documented bug in some dynamic random-access memory (DRAM) chips can be exploited to gain...
Vulnerabilities
Researchers have identified a security issue in the Google Apps Admin console that could have been exploited to claim any domain and use it...
Vulnerabilities
Siemens has produced updates to address security flaws in several of the company’s solutions. ICS-CERT and Siemens have published a total of five advisories...
Vulnerabilities
Initially, experts believed that the recently disclosed SSL/TLS vulnerability dubbed “FREAK” doesn’t affect Windows, but Microsoft confirmed on Thursday that all supported versions of...
Vulnerabilities
Researchers who identify security issues in Adobe’s Web applications can report their findings through the company’s newly launched vulnerability disclosure program powered by HackerOne.
Vulnerabilities
Two security holes have been identified in ShareLaTeX, the online real-time collaborative LaTeX editor. Only one of the vulnerabilities has been addressed, but a...
Vulnerabilities
The Wi-Fi passwords of GoPro users could have been easily downloaded from the camera maker’s servers by leveraging a security flaw, a researcher has...
Vulnerabilities
Chrome 41 is available for download. The latest version of Google’s Web browser brings new apps and extension APIs, stability and performance improvements, and...
Network Security
Researchers have released details of a vulnerability (CVE-2015-0204) that makes it possible for hackers to crack HTTPS-protected traffic by forcing vulnerable clients to downgrade...
Vulnerabilities
The Government Accountability Office (GAO) has released a report calling for the Federal Aviation Administration (FAA) to strengthen the cyber-security of the nation's air...
Vulnerabilities
Natural Grocers is investigating a breach impacting customer payment card data.
Vulnerabilities
D-Link will release firmware updates in the upcoming days to address multiple router vulnerabilities uncovered over the past months by security researchers.
Vulnerabilities
A researcher has demonstrated that lossy image compressors can be used to hide arbitrary code inside PDF documents. The method could be highly efficient...
Vulnerabilities
The Internet Corporation for Assigned Names and Numbers (ICANN) shut down two new generic top-level domain (gTLD) portals on February 27 after learning of...
Vulnerabilities
An innocent-looking Blu-ray disc can be used by malicious actors to get a foothold in a targeted network, a researcher has warned.According to Stephen...
Vulnerabilities
Rackspace, Amazon, Linode and likely other cloud providers will reboot some of their servers over the next week after they patch several vulnerabilities affecting...
Vulnerabilities
Some of Seagate’s network-attached storage (NAS) solutions for businesses are plagued by serious vulnerabilities that can be exploited by malicious actors to execute arbitrary...
Vulnerabilities
Organizations that use the IntraVUE network visualization software from Network Vision are advised to update their installations as soon as possible because older versions...
Vulnerabilities
Researchers have identified a critical information leakage vulnerability in Jetty, the Web server and Java servlet container maintained by the Eclipse Foundation.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)