Data Protection
Researchers have uncovered several security holes in enterprise software solutions developed by German business software giant SAP.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Google announced on Tuesday the availability of Chrome 38 for Windows, Linux and Mac. The latest version of the Web browser patches a total...
Vulnerabilities
New research from Arbor Networks reveals a significant jump in Simple Service Discovery Protocol (SSDP) reflection attacks during the third quarter of the year. ...
Vulnerabilities
Siemens has updated its SIMATIC PCS 7 product to plug a number of security vulnerabilities.
Vulnerabilities
The development team behind the Bugzilla bug-tracking software has released an update that addresses several security issues, including a critical flaw that could lead...
Incident Response
On Monday afternoon, Yahoo told SecurityWeek that servers associated with Yahoo Games had been hacked as a result of the recently disclosed “Shellshock” vulnerability, but...
M&A Tracker
In a broad agency announcement published last week, the Defense Advanced Research Projects Agency (DARPA) informed researchers that it is looking for innovative proposals...
Mobile & Wireless
A Same Origin Policy (SOP) bypass vulnerability has been identified in the Android browser installed by default on versions of the operating system prior...
Vulnerabilities
Two researchers have released attack code for the 'BadUSB' issue first revealed at the Black Hat conference earlier this summer.
Vulnerabilities
Researchers at Offensive Security, the company that develops and maintains Kali Linux, have once again managed to disable the protection mechanisms provided by Microsoft's...
Vulnerabilities
Flaw in Schneider Electric Web HMI Allows Authentication BypassThe U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) published an advisory this week to...
Cloud Security
Joining several major tech companies, VMware has started rolling out software updates that address the recently discovered GNU Bash vulnerability dubbed ShellShock.
Cloud Security
A serious security vulnerability (CVE-2014-7188) affecting the open-source hypervisor Xen has forced Amazon, Rackspace and other cloud providers to reboot their systems in order...
Vulnerabilities
The U.S. Food and Drug Administration (FDA) released a set of recommendations for manufacturers for managing cyber-security risks and protecting patient health and information.
Vulnerabilities
Since it is becoming more difficult to find serious vulnerabilities in Chrome, Google has decided to increase the amount of money it pays to...
Network Security
The open source virtual private network solution OpenVPN is reportedly affected by the notorious GNU Bash vulnerability dubbed ShellShock, a researcher revealed on Tuesday.
Vulnerabilities
The team behind the open-source WordPress vulnerability scanner WPScan has launched a database containing information on numerous known security holes affecting WordPress.
Network Security
Ever since the existence of the GNU Bash flaw (Shellshock) came to light last week, threat actors have been searching for vulnerable machines that...
Vulnerabilities
SAN FRANCISCO - Apple on Monday issued a software update to protect Macintosh computers from being bitten by a recently discovered "Bash" bug seen...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)