Network Security
Cisco has been analyzing its products to determine which of them are affected by the recently disclosed Secure Sockets Layer (SSL) version 3 protocol...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
In an effort to ensure that its advertising system is not plagued by any security bugs, Facebook has decided to double the amount of...
Application Security
PHP released last week versions 5.6.2, 5.5.18 and 5.4.34 of the scripting language. In addition to some functionality bugs, the latest releases address a...
Vulnerabilities
Security updates released by Apple last week address a series of vulnerabilities, including the recently uncovered SSL 3.0 flaw (CVE-2014-3566) that can be leveraged...
Application Security
AMSTERDAM - BLACK HAT EUROPE - A researcher has discovered a new attack method that could potentially impact many of the world's largest websites....
Vulnerabilities
Researchers at Akamai Technologies have issued a warning about a spate of distributed denial-of-service attacks being launched via Universal Plug and Play (UPnP) devices.
Vulnerabilities
A critical SQL injection bug has been patched in Drupal, and users are being advised to upgrade as soon as possible. The vulnerability exists...
Malware & Threats
Remember the days when security awareness programs only had to warn employees about website spoofing? Unfortunately, cyber-attack methods have advanced to the point where...
Vulnerabilities
Microsoft and Oracle customers will have their hands full applying a spate of security updates that were issued today.
Vulnerabilities
It is a busy day in the world of Microsoft security.
Application Security
In most Web attacks, malware is downloaded to victims' machines from a malicious or a compromised server. However, a researcher has uncovered a new...
Cyberwarfare
Attackers exploited a zero-day vulnerability in Windows to spy on NATO, the European Union, Poland, Ukraine, private energy organizations, and European telecommunications companies, according...
Vulnerabilities
Polycom has published a security advisory listing several products that are vulnerable to the recently disclosed GNU Bash vulnerability dubbed "ShellShock."
Cybercrime
Cybercriminals are expanding the Linux botnet dubbed "Mayhem" by leveraging the recently discovered vulnerabilities in the GNU Bash shell, according to researchers.
Vulnerabilities
A researcher has identified a vulnerability in the PayPal mobile API that can be exploited by an attacker to bypass a security feature that's...
Vulnerabilities
Track-It!, the IT helpdesk solution developed by business service management software company BMC Software, is plagued by several vulnerabilities, the CERT Coordination Center at...
Tracking & Law Enforcement
A group of security researchers, hardware hackers, hardware developers and hobbyists have set out to demonstrate that many of the tools similar to those...
Vulnerabilities
Microsoft is readying nine security bulletins for release next week as part of Patch Tuesday. According to their pre-patch advisory notice, three of the...
Vulnerabilities
The developers of the popular malware analysis framework Cuckoo Sandbox were forced to take quick action on Tuesday after being notified of the existence...
Vulnerabilities
IBM is just one of the many technology companies struggling to patch products affected by the GNU Bash vulnerability dubbed "ShellShock."
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)