Network Security
The open source virtual private network solution OpenVPN is reportedly affected by the notorious GNU Bash vulnerability dubbed ShellShock, a researcher revealed on Tuesday.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
The team behind the open-source WordPress vulnerability scanner WPScan has launched a database containing information on numerous known security holes affecting WordPress.
Network Security
Ever since the existence of the GNU Bash flaw (Shellshock) came to light last week, threat actors have been searching for vulnerable machines that...
Vulnerabilities
SAN FRANCISCO - Apple on Monday issued a software update to protect Macintosh computers from being bitten by a recently discovered "Bash" bug seen...
Incident Response
Vulnerabilities
WASHINGTON - Apple said Friday that its Macintosh PCs are unlikely to be affected by the recently discovered "Bash" bug that could hit millions...
Cybersecurity Funding
Argus Cyber Security Raises $4 Million in Series A Funding Round Argus Cyber Security, a Tel Aviv, Israel-based startup focused on automotive cyber security,...
Vulnerabilities
The existence of a highly critical vulnerability affecting the GNU Bourne Again Shell (Bash) has been brought to light this week. The security flaw...
Vulnerabilities
The recently disclosed “Bash Bug” or “Shellshock” vulnerability that affects most versions of Linux, Unix, and Mac OS X operating systems is the latest...
Vulnerabilities
Beating back the recently disclosed GNU Bourne Again Shell (Bash) vulnerability may not be as easy as some hoped.
Vulnerabilities
Former convicted hacker Kevin Mitnick has entered a grey area of the security industry after launching a service that facilitates selling and buying of...
Vulnerabilities
Two independent research teams have discovered that a serious vulnerability in Mozilla's Network Security Services (NSS) cryptographic library can be exploited for signature forgery...
Vulnerabilities
A vulnerability (CVE-2014-6271) has been discovered in the GNU Bourne Again Shell (bash) that can be exploited to execute code.
Vulnerabilities
Microsoft announced that it is launching a bug bounty program for its online services. The program is open to anyone across the globe and...
Cybercrime
The official website for the popular JavaScript library jQuery (jquery.com) has been compromised and abused by cybercriminals to distribute information-stealing malware, RiskIQ has reported.
Vulnerabilities
Security researchers can earn a minimum of $128 by reporting vulnerabilities in the privacy-focused Android-based phone Blackphone and Silent Circle's secure communications services.
Vulnerabilities
Wi-Fi thermostats developed by UK-based company Heatmiser are plagued by several vulnerabilities that can be exploited remotely by a malicious actor, a researcher reported...
Application Security
A researcher has identified a series of vulnerabilities on a Yahoo service that ultimately allowed him to gain root access to one of the...
Vulnerabilities
Apple has released updates for several of its products and, in addition to new features and functionality fixes, the company has also addressed several...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)