Vulnerabilities
Researchers have identified an information leak and access control bypass vulnerability in the popular WP eCommerce plugin for WordPress.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Mobile & Wireless
Until recently, cybercriminals could have hijacked the account of any GroupMe user simply by knowing the phone number connected to the targeted account, a...
Network Security
Google has decided to make some changes in its Chrome Web browser in order to ensure that users are protected against POODLE attacks.
Threat Intelligence
The National Institute of Standards and Technology (NIST) is seeking public comment on a draft paper outlining ways to help organizations improve threat intelligence...
Black Hat
Bypassing Air Gap Security: Malware Uses Radio Frequencies to Steal Data from Isolated Computers
Cybercrime
Merchant Customer Exchange (MCX), the developer of the mobile payment system called CurrentC, is notifying some users that their email addresses have been stolen...
Network Security
Drupal Issues “Highly Critical” Security Alert to Drupal 7 Users
Vulnerabilities
Microsoft released a Fix It tool today to allow customers to disable SSL 3.0 in all supported versions of Internet Explorer in light of...
Vulnerabilities
ICS-CERT (Industrial Control Systems Cyber Emergency Response Team) has issued a warning about an ongoing attack campaign targeting industrial control systems.
Network Security
A researcher has identified a flaw that can be exploited to trick certain ASUS wireless routers into updating their firmware to old or potentially...
Network Security
A serious vulnerability has been discovered in a File Transfer Protocol (FTP) client used by many Unix-like (*NIX) operating systems, representatives of the NetBSD...
Email Security
The GNU Bash vulnerability known as ShellShock is being leveraged by cybercriminals as part of a botnet campaign, researchers reported on Friday.
Privacy
In response to accusations that it's spying on users of the e-book reader application Adobe Digital Editions, Adobe Systems has released a new version...
Network Security
Cisco has released software updates to address a three-year-old vulnerability in the Telnet code of Cisco AsyncOS, the operating systems used in some of...
Vulnerabilities
Researchers have found that a large number of networking devices are vulnerable to cyberattacks because of poor implementation or configuration of the Network Address...
Vulnerabilities
An exploit for a Flash Player vulnerability that was patched just over one week ago by Adobe has already been added by cybercriminals to...
Cyberwarfare
Microsoft has become aware of targeted cyberattacks leveraging a new vulnerability (CVE-2014-6352) that affects most supported Windows releases, according to an advisory company published...
Vulnerabilities
Palo Alto Networks is advising customers to ensure they avoid a configuration issue that can expose user credentials.
Vulnerabilities
Apple released on Monday a new version of its mobile operating system and, in addition to some interesting new features, the latest version includes...
Privacy
The Chinese government has started launching cyberattacks against Apple customers just as the company announced the availability of the latest iPhone in the country,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)