Vulnerabilities
A researcher has uncovered a vulnerability on one of Twitter's subdomains that could have been exploited to delete all the payment cards used by...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Adobe released security updates on Tuesday for Adobe Reader and Acrobat. The updates, originally set to be released last week, had been delayed due...
Vulnerabilities
A serious vulnerability has been discovered in the Web browser installed by default on a large number of Android devices, researchers have warned.
Vulnerabilities
A security researcher has uncovered several vulnerabilities, including a critical issue that exposed sensitive information, on the website of home automation company Nest Labs.
Vulnerabilities
A team of researchers say they believe the infamous Heartbleed bug was not the target of widespread attacks before it was publicly disclosed in...
Vulnerabilities
Adobe Flash Player 15.0.0.152, released on Tuesday, addresses a total of 12 security vulnerabilities, many of which could be exploited for code execution.
Vulnerabilities
Google has announced plans to begin sunsetting the SHA-1 cryptographic hash algorithm in the upcoming version of its Chrome browser.
Vulnerabilities
Microsoft issued a patch today for a vulnerability in Internet Explorer (IE) that has been targeted in attacks as part of its monthly Patch...
Network Security
A few months after details of the Heartbleed vulnerability surfaced, OpenSSL published a document outlining the project's various objectives. One of those objectives was...
Vulnerabilities
Sensys Networks, a company that provides integrated wireless traffic data systems, announced last week the availability of software updates that address security issues identified...
Vulnerabilities
Adobe announced on Monday night that the Adobe Reader and Acrobat security updates originally set to be released today, have been delayed until next...
Vulnerabilities
Microsoft is set to release four security bulletins next Tuesday covering issues in Windows, Internet Explorer and other products. Only one of the bulletins...
Application Security
A popular WordPress plugin that enables users to easily create responsive sliders is plagued by a security hole that has been actively exploited by...
Mobile & Wireless
The CERT Coordination Center at Carnegie Mellon University (CERT/CC) has published a list of popular Android applications that fail to properly validate SSL certificates,...
Vulnerabilities
In an effort to thank researchers who responsibly disclose security vulnerabilities, Twitter has introduced a bug bounty program powered by the HackerOne platform.
Mobile & Wireless
Security researchers are invited to demonstrate their mobile hacking skills at the Mobile Pwn2Own competition that's scheduled to take place later this year in...
Network Security
Akamai Technologies has published a threat advisory to warn organizations of attacks where cybercriminals are infecting Linux servers with malware capable of launching powerful...
Vulnerabilities
Mozilla has released Firefox 32 for Windows, Linux, Mac and Android. In addition to some new features, the latest version of the Web browser...
Cybercrime
LOS ANGELES - Scandal rocked both Hollywood and the US tech industry Monday after an apparent massive hack of a cloud data service unleashed...
Network Security
A large number of the wireless Internet connections in Brazil are exposed to man-in-the-middle (MitM) attacks because they're not secured properly, a researcher has...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)