Vulnerabilities
An attacker can make malicious modifications to the firmware of Apple MacBooks and keep the devices under his control even after the operating system...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Remotely Exploitable NTP Vulnerabilities Put Industrial and Critical Infrastructure Systems at Risk
Vulnerabilities
Millions of small office and home (SOHO) routers are affected by a critical security bug that can be exploited by a remote attacker to...
Vulnerabilities
A researcher has identified a serious vulnerability in the Linux kernel that can be exploited by a local attacker to escalate privileges on affected...
Vulnerabilities
The distributed revision control system Git is affected by a serious vulnerability that could be exploited by an attacker to execute arbitrary commands and...
Vulnerabilities
An attack launched by an advanced persistent threat (APT) group against an unnamed steel plant in Germany resulted in significant damage, according a new...
Vulnerabilities
SAP has patched two serious vulnerabilities affecting users of their SAP BASIS and SAP BusinessObjects enterprise software.
Vulnerabilities
A $20 USB microcontroller that someone can wear around their neck can be used to weaponize mouse clicks and keyboard actions in an effort...
Vulnerabilities
The ProClima configuration utility developed by Schneider Electric is affected by several command injection vulnerabilities, the Industrial Control Systems Computer Emergency Response Team (ICS-CERT)...
Vulnerabilities
Researchers at cloud security company Alert Logic have discovered a vulnerability in the Linux platform that can lead to privilege escalation. The flaw has...
Vulnerabilities
IOActive, Inc., a provider of security testing and assessment services, announced today that it has expanded its Vehicle Security Service to help automakers and...
Vulnerabilities
Researchers at Palo Alto Networks released details today of a backdoor on millions of Android-based device sold by one of the largest smartphone manufacturers...
Vulnerabilities
Two products from Cisco are vulnerable to a new variant of the Padding Oracle On Downgraded Legacy Encryption (POODLE) attack, the company said in...
Vulnerabilities
Several Linux distributions are affected by a couple of security holes found in "mailx," a utility that's used for sending and receiving mail.
Vulnerabilities
CSRF, XSS and SQL injection vulnerabilities found in CA Release AutomationCA Technologies, one of the world's largest independent software corporations, has released a hotfix...
Vulnerabilities
The developers of Docker last week released new versions of the product to address several security issues, and they shared some information on the...
Vulnerabilities
A researcher has identified a stack buffer overflow vulnerability in Honeywell's OPOS (OLE for Retail Point-of-Sale) Suite, a solution that provides a standard programming...
Vulnerabilities
The upgrade mechanism in older versions of Malwarebytes Anti-Malware and Malwarebytes Anti-Exploit is plagued by a vulnerability that can be exploited to load malicious...
Vulnerabilities
Researchers at threat intelligence company Norse have identified a serious vulnerability in FreeBSD, the popular Unix-like operating system that's used on servers, desktop computers...
Security Infrastructure
ICS-CERT has updated an advisory about ongoing attacks against critical infrastructure companies with new information about what attackers are targeting.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)