Vulnerabilities
Last week, Microsoft released 14 security bulletins as part of Patch Tuesday for November 2014. The updates contained four rated as critical, including a...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Security Architecture
Two independent research groups have already managed to bypass the protection mechanisms provided by the latest version of Microsoft's Enhanced Mitigation Experience Toolkit (EMET).
Network Security
Last week, Microsoft released 14 security bulletins as part of Patch Tuesday for November 2014. The updates contained four rated as critical, but one...
Malware & Threats
Application Security
Researchers have published a paper detailing a new attack method that can be leveraged to silently modify the digital ballots used in the Internet...
Incident Response
BrowserStack, the cross-browser testing service, has provided more details on the attack in which a hacker gained access to information belonging to some of...
Mobile & Wireless
Researchers hacked several of the latest popular smartphones during the Mobile Pwn2Own competition that took place alongside the PacSec Applied Security Conference in Tokyo...
Vulnerabilities
Adobe has released security updates for Flash Player on all platforms to fix a total of 18 vulnerabilities, many of which can be exploited...
Vulnerabilities
Microsoft released 14 security bulletins today as part of Patch Tuesday, including a critical update for Internet Explorer.
Endpoint Security
Microsoft Releases EMET 5.1The new version of the Enhanced Mitigation Experience Toolkit (EMET) released by Microsoft on Monday brings improved protection and addresses several...
Network Security
The details and an exploit for a serious vulnerability affecting certain Belkin home routers were released last week by a researcher.Marco Vaz of Integrity...
Vulnerabilities
The latest version of the popular instant messaging application Pidgin (2.10.10) addresses multiple vulnerabilities, including three reported by Cisco's Talos security intelligence and research...
Network Security
In an advisory published on Wednesday, Cisco revealed that four of its small business RV series routers are affected by multiple vulnerabilities that can...
Mobile & Wireless
A universal cross-site scripting (UXSS) vulnerability has been identified in the Android browser that’s installed by default on many Android smartphones, researchers reported on...
Endpoint Security
The latest version of Apple's Mac operating system, OS X 10.10 Yosemite, is plagued by a critical vulnerability that can be exploited to take...
Vulnerabilities
Microsoft is planning to release 16 security bulletins next week as part of Patch Tuesday, including five that are rated 'critical.' The updates include...
Mobile & Wireless
In response to recent reports that its "Find My Mobile" service is plagued by a vulnerability that can be leveraged lock and unlock devices,...
Vulnerabilities
Network Security
Google has released a new network traffic security testing tool that can be used to check if devices and applications are impacted by Transport...
Cybercrime
Researchers at Newcastle University in the United Kingdom have discovered a flaw in Visa's contactless credit cards that can be leveraged to steal large...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)