Vulnerabilities
Microsoft has fixed and reissued a patch released earlier this month that left some users with the infamous 'Blue Screen of Death.' The patch...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Google has plugged 50 security vulnerabilities in the latest update to the Chrome browser. Among the issues fixed in Chrome 37 are a number...
Network Security
Routers produced by China-based networking solutions provider Netis Systems are plagued by a security hole that can be leveraged by an attacker to gain...
Data Protection
After being notified by researchers at Sucuri, the developers of the Akeeba backup extension for Joomla fixed a vulnerability that can be leveraged to...
Mobile & Wireless
Researchers at Trend Micro have uncovered a security hole that can be exploited to launch phishing attacks against users who make payments from their...
Privacy
A recent study conducted by iSEC Partners provided the developers of the Tor Browser Bundle with several long and short-term recommendations on how to...
Training & Awareness
SAN FRANCISCO - Facebook on Wednesday awarded a $50,000 Internet Defense Prize to a pair of German researchers with a seemingly viable approach to...
Vulnerabilities
Researchers at Core Security say they have identified a security vulnerability in the Visual Component Library (VCL) that affects apps developed with Delphi and...
Application Security
Researchers at dxw Security have discovered a flaw in the WordPress Mobile Pack plugin that can be exploited to access password-protected posts.
Malware & Threats
The complete source code for the Android remote access Trojan (RAT) called Dendroid has been leaked online, which researchers have found contains several vulnerabilities.
Cybercrime
Earlier this week, Community Health Systems, one of the largest hospital operators in the United States, announced that hackers managed to steal the records
Vulnerabilities
Two researchers from the University of California, Berkeley, released a paper introducing new attack techniques they contend break existing defenses against return-oriented programming (ROP).
Network Security
Facebook Patched Flaw That Could Be Exploited for DDoS AttacksFacebook has fixed a vulnerability that could have been leveraged to amplify distributed denial-of-service (DDoS)...
Disaster Recovery
A recent security bulletin released by Microsoft as part of the August 2014 Patch Tuesday can lead to a crash on some systems, the company...
Vulnerabilities
Safari 6.1.6 and Safari 7.0.6, the latest versions of Apple's Web browser, come with fixes for several security vulnerabilities, some of which could be...
Vulnerabilities
A researcher has identified several vulnerabilities in the WordPress plugin for Disqus, the popular comment hosting service for websites and online communities.
Vulnerabilities
BlackBerry released patches Tuesday to plug a pair of security vulnerabilities.
Vulnerabilities
Adobe Patches Reader Sandbox Escape Vulnerability Leveraged in Targeted AttacksAdobe Systems released security updates for Adobe Flash Player, Adobe Reader and Adobe Acrobat on...
Vulnerabilities
Microsoft and Adobe released a set of patches today to fix critical vulnerabilities in their products.
Endpoint Security
Microsoft has announced its intention to stop supporting older versions of the Internet Explorer Web browser starting with January 12, 2016.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)