Vulnerabilities
Researchers at FireEye revealed more information about how attackers can compromise iOS devices.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
A combination of vulnerabilities could have allowed a malicious hacker to delete any comment on Facebook, according to a researcher.
Vulnerabilities
Some versions of the stock email app in Android are plagued by a vulnerability that can be exploited to cause the application to crash,...
Vulnerabilities
A security flaw affecting several Netgear Wi-Fi router models can be exploited to gain access to various pieces of information, including the administrator password,...
Vulnerabilities
Siemens has released service packs and updates to address several vulnerabilities affecting the company’s SIMATIC STEP 7 and SIMATIC WinCC solutions.Researchers identified a total...
Vulnerabilities
After being criticized by some members of the industry for its strict vulnerability disclosure policy, Google has decided to make some changes based on...
Vulnerabilities
Personal weather stations developed by Netatmo send Wi-Fi passwords and other information to the company’s servers in clear text, a researcher reported on Thursday.
Vulnerabilities
HP’s Zero Day Initiative (ZDI) has announced the rules and prizes for this year’s Pwn2Own competition, scheduled to take place March 18-19 at the...
Vulnerabilities
Facebook has fixed a security bug that could have allowed attackers to delete a user's photos.
Vulnerabilities
Vulnerabilities plaguing Google Play and some Android Web browsers can be exploited by an attacker to remotely execute arbitrary code on smartphones, researchers warned...
Vulnerabilities
Three students from Saarland University in Germany have discovered that tens of thousands of MongoDB databases running as a service or website backend on...
Cybercrime
A Chinese attack group infected Forbes.com back in November in a watering hole attack targeting visitors working in the financial services and defense industries,...
Vulnerabilities
A study conducted by HP shows that a majority of popular Internet-connected home security systems can be easily accessed by malicious parties due to...
Vulnerabilities
One of the security bulletins released by Microsoft on Tuesday fixes a privilege escalation vulnerability which, according to researchers, can be exploited by malicious...
Vulnerabilities
Microsoft issued nine security bulletins today for this month's Patch Tuesday.
Vulnerabilities
The price of gas may have recently dropped well below the highs consumers have seen in recent years, but the cost of leaving an...
Vulnerabilities
When presented with a glass that is filled halfway, an optimist will say it is half full. The pessimist will say the glass is...
Vulnerabilities
Advantech - a maker of industrial PCs, embedded single board computers and automation controllers and software – has patched a critical vulnerability in its...
Vulnerabilities
Government requests for Twitter user data worldwide nearly doubled between 2013 and 2014, according to the company's latest transparency report.
Vulnerabilities
Box Sync for Mac has been updated to address a security issue that exposed sensitive internal information, a researcher reported over the weekend.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)