Endpoint Security
IBM has released a software update for the company's Endpoint Manager solution to address a vulnerability that can be leveraged by a remote, unauthenticated...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Cybercrime
Researchers have sinkholed the command and control (C&C) domains used by the CryptoPHP malware and determined that tens of thousands of websites have been...
Identity & Access
The developers of OpenVPN have released a new version of the open-source virtual private network software to address a critical denial-of-service (DoS) vulnerability that...
Vulnerabilities
Mozilla released Firefox 34 on Monday and, as it promised in October, the company disabled Secure Sockets Layer (SSL) 3.0 support to protect users...
Network Security
A reflected cross-site scripting (XSS) vulnerability has been identified in the management interface of the Alcatel-Lucent 1830 Photonic Service Switch, but the vendor doesn't...
Application Security
The developers of Docker, the open platform that's used by developers and system administrators to build, ship, and run distributed applications, have released version...
Vulnerabilities
The Electronic Frontier Foundation (EFF) and several privacy and civil liberties groups have joined forces to urge the National Institute of Standards and Technology...
Vulnerabilities
Riot Games, the developer of the popular multiplayer online game League of Legends, has shared some details on its bug bounty program.
Application Security
With the release of WordPress 4.0.1, the developers of the popular blogging tool and a content management system (CMS) have addressed several vulnerabilities, including...
ICS/OT
Vulnerabilities Expose SCADA Systems to Remote AttacksSiemens has released software updates to address two critical vulnerabilities in its SIMATIC WinCC supervisory control and data...
Vulnerabilities
Security companies have started detecting attacks that leverage a critical remote code execution (RCE) vulnerability in Windows, which Microsoft patched last week.
Vulnerabilities
A new report from Verisign on distributed denial-of-service attacks showed that the number of distributed denial-of-service [DDoS] attacks exceeding 10 Gbps grew substantially between...
Application Security
Drupal 6.34 and Drupal 7.34 were released on Wednesday to address multiple moderately critical vulnerabilities affecting prior versions.
Vulnerabilities
New research from Rapid7 has uncovered multiple vulnerabilities in the Hikvision DVR (Digital Video Recorder) devices. Researchers discovered three buffer overflow vulnerabilities in Hikvision's...
Application Security
The creators of the jQuery Validation Plugin have finally addressed a vulnerability in a demo component that was first reported to them more than...
Cybercrime
LONDON - Britain's privacy watchdog on Thursday called on Russia to take down a site showing hacked live feeds from thousands of homes and...
Mobile & Wireless
Apple's first update for the iOS 8.1 mobile operating system includes bug fixes, increased stability and performance improvements for older devices, and also addresses...
Vulnerabilities
Researchers at Core Security have disclosed multiple vulnerabilities affecting products from Advantech Corp., which provides industrial automation and embedded solutions.
Vulnerabilities
With the release of the stable version of Chrome 39, Google has made several changes to improve stability and performance and has addressed numerous...
Vulnerabilities
The U.S. hosts more than two-fifths of all malicious links and more than a quarter of all the botnet command and control servers in...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)