Vulnerabilities
A remotely exploitable buffer overflow vulnerability has been identified in one of Schneider Electric’s Wonderware solutions, ICS-CERT reported last week.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
vBulletin users who still use the vBSEO search engine optimization plugin are advised to either uninstall it or apply a patch because the software...
Vulnerabilities
Aviator, the Web browser developed by WhiteHat Security with security and privacy in mind, is is not as secure as it should be, Google...
Vulnerabilities
Researchers have uncovered a DOM-based self-XSS (cross-site scripting) flaw in Microsoft’s Dynamics CRM customer relationship management solution, but the company says it doesn’t consider...
Vulnerabilities
A vulnerability has been identified in a library utilized by many manufacturing and technology companies for HART-based field devices used by industrial control systems...
Vulnerabilities
Many ASUS wireless routers are affected by a vulnerability that can be exploited by an attacker with access to the target’s local area network...
Vulnerabilities
Microsoft No Longer Making Patch Tuesday Advanced Notification Available for General Public Microsoft has decided to ditch its tradition of publicly publishing information about...
Vulnerabilities
Several patches have been released today to plug eight vulnerabilities in OpenSSL. The fixes are contained within OpenSSL 1.0.1k, 1.0.0p and 0.98zd. The most...
Vulnerabilities
Researchers at Trend Micro have identified a vulnerability related to the Android manifest file that can be exploited to cause devices to crash.
Network Security
I collect distributed denial of service (DDoS) stories. Part of my job is to explain to audiences and customers how a particular defensive technology...
Vulnerabilities
Online personalized card and gift company Moonpig has shut down its mobile applications after a researcher revealed the existence of a serious vulnerability that...
Vulnerabilities
The Carnegie Mellon University CERT Coordination Center warned on Monday that serious vulnerabilities exist in the Unified Extensible Firmware Interface (UEFI), the BIOS replacement...
Vulnerabilities
Immobilise, the website of the United Kingdom’s National Property Register, was plagued until recently by a privacy flaw that could have been exploited to...
Vulnerabilities
Apple has reportedly patched a security hole exploited by a tool designed to hack accounts on Apple iCloud.
Vulnerabilities
Google has published details and a proof-of-concept (PoC) for a local privilege escalation vulnerability affecting Windows 8.1.
Vulnerabilities
Researchers at Trend Micro say attackers are actively exploiting a vulnerability in Android's WebView browser in order to compromise Facebook accounts.
Vulnerabilities
A researcher has found a way to upload potentially malicious code to Facebook's servers by hiding it inside a harmless-looking Microsoft Word document file.
Vulnerabilities
For identifying and responsibly disclosing vulnerabilities in Google App Engine for Java, researchers at Poland-based research company Security Explorations have been rewarded by Google...
Vulnerabilities
New research from Vanson Bourne found that more than three quarters of organizations in the United States and U.K. have suffered a domain name...
Vulnerabilities
Staying on top of your organization’s security needs is no easy task. The constant updates, patches, vulnerability assessments and maintenance activities can quickly overwhelm...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)