Vulnerabilities
A serious cross-site scripting (XSS) vulnerability plaguing the Google Apps administrator console was patched by the search giant a few months ago.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Siemens has released firmware updates to address various security holes affecting some SCALANCE industrial switches and SIMATIC controllers.SCALANCE switch vulnerabilities
Vulnerabilities
A vulnerability that can be exploited for denial-of-service (DoS) attacks and possibly even for remote code execution has been uncovered in the cryptographic library...
Vulnerabilities
Oracle has pushed out a massive number of patches in a security update, including critical fixes for Java SE and the Oracle Sun Systems...
Vulnerabilities
Two vulnerabilities that could potentially be exploited for arbitrary code execution exist in libavcodec, a free and open-source audio/video codecs library used by several...
Vulnerabilities
Internet domain registrar GoDaddy has rushed to fix a cross-site request forgery (CSRF) vulnerability that could have been leveraged by malicious actors to take...
Vulnerabilities
A researcher has demonstrated that two use-after-free (UAF) mitigations introduced recently by Microsoft, Heap Isolation and Delay Free, can be bypassed.
Vulnerabilities
A vulnerability has been identified in a substation clock from Arbiter Systems, a company that designs and manufactures time and power measurement solutions for...
Vulnerabilities
Hackers could have easily hijacked the email accounts of Verizon customers by leveraging a vulnerability in a FiOS Web service, a researcher revealed on...
Vulnerabilities
Google has released the details of another Windows vulnerability. Microsoft planned on fixing the flaw with the January updates, but was forced to delay...
Vulnerabilities
A vulnerability in Apache Qpid, the open source messaging system that implements the Advanced Message Queuing Protocol (AMQP), can be exploited by an authenticated...
Vulnerabilities
Mozilla released Firefox 35 on Tuesday. In addition to new features, changes and fixes, the latest version of the popular Web browser addresses several...
Vulnerabilities
Adobe released updates for Flash Player on Tuesday to address a total of 9 critical vulnerabilities, many of which can be exploited for arbitrary...
Vulnerabilities
In its first Patch Tuesday of the year, Microsoft released one critical security bulletin and seven others rated 'important.'
Vulnerabilities
The U.S. General Accounting Office (GAO) has published a new report calling for the Department of Homeland Security (DHS) and the General Services Administration...
Security Infrastructure
Siemens issued a security advisory on Tuesday to alert users of its SIMATIC WinCC Sm@rtClient App for iOS of multiple privilege escalation vulnerabilities.
Vulnerabilities
Google published the details of a new privilege escalation vulnerability in Windows just as Microsoft was preparing to patch it.The security hole was reported...
Vulnerabilities
Vulnerabilities found in WebView and possibly other components included in old versions of the Android operating system will no longer be patched by Google,...
Vulnerabilities
Researchers at Core Security have released details of unpatched vulnerabilities impacting a slew of products from Corel Software.
Vulnerabilities
ESET has published a new report focusing on Windows vulnerabilities fixed by Microsoft in 2014 and their exploitation.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)