Vulnerabilities
Security updates were released by Apple on Tuesday for OS X, iOS, Safari and Apple TV. The updates address a large number of vulnerabilities...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Researchers at Core Security Technologies issued an advisory today on three vulnerabilities in affecting the FreeBSD operating system.
Vulnerabilities
Researchers at Qualys are advising organizations to apply a patch for a critical vulnerability affecting Linux systems as far back as 2000.
Vulnerabilities
Distributed denial-of-service (DDoS) attacks are growing in both size and frequency, challenging organizations to keep up, according to a new report from Arbor Networks.
Vulnerabilities
Researchers from Core Security have identified a vulnerability that can be remotely exploited for denial-of-service (DoS) attacks against certain Android devices.
Vulnerabilities
With just a few days until the New England Patriots face the Seattle Seahawks in Super Bowl XLIX, researchers warn that at least one...
Vulnerabilities
Researchers reported earlier this month that Google was no longer patching vulnerabilities affecting the WebView component in Android Jelly Bean (4.3) and prior. The...
Vulnerabilities
The vulnerabilities disclosed last week by Google and the Thunderstrike flaw detailed in December by a researcher have been reportedly fixed by Apple in...
Vulnerabilities
Up until last week, it was easy for a malicious hacker to gain access to the reservations and personal details of Marriott customers by...
Vulnerabilities
Several security vulnerabilities affecting PHP were addressed last week with the release of versions 5.6.5, 5.5.21 and 5.4.37.One of the flaws, an out-of-bounds read...
Vulnerabilities
Adobe updated Flash Player over the weekend to fix the second zero-day vulnerability (CVE-2015-0311) reported last week. The patch was initially announced for this...
M&A Tracker
Malicious actors could theoretically shut down more than 5,300 gas stations in the United States because the automatic tank gauges (ATGs) used to monitor...
Vulnerabilities
The details of three high-severity vulnerabilities affecting Apple’s OS X operating system have been disclosed over the past two days by Google.Vulnerability reports containing...
Vulnerabilities
After saying early Thursday that it was investigating reports of a critical zero-day vulnerability affecting its Flash Player that is being exploited in the...
Vulnerabilities
Researchers at Symantec have identified a group of attackers targeting Russian-speaking individuals since at least January 2012.
Vulnerabilities
Adobe has released an out-of-band update to address a Flash Player vulnerability that has been exploited in the wild in attacks targeting older versions...
Vulnerabilities
Australia-based enterprise software provider Atlassian has released updates to address a serious vulnerability affecting several of the company’s solutions.The issue, an Object-Graph Navigation Language...
Vulnerabilities
Google announced on Wednesday the release of Chrome 40 for Windows, Mac OS and Linux. The latest update for the popular Web browser (40.0.2214.91)...
Vulnerabilities
While analyzing an instance of the Angler exploit kit, French security researcher Kafeine identified what appears to be an exploit for an Adobe Flash...
Vulnerabilities
Some mobile applications are making real-life games of hide-and-go-seek a whole lot easier, according to research presented recently at the ShmooCon 2015 security conference.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)