Vulnerabilities
A leaked document believed to have come from a manufacturer of surveillance equipment shows Apple iOS is more resistant to the company's spyware than...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Last week's announcement that a group of cybercriminals reputedly had gotten their hands on 1.2 billion user credentials turned the cyber-world's attention to a...
Mobile & Wireless
Multiple vulnerabilities have been identified in Blackphone, the first smartphone developed with security and privacy in mind, a researcher announced on Twitter on Sunday.
Incident Response
A group of security researchers called upon automobile manufacturers to build cyber-security safeguards inside the software systems powering various features in modern cars.
Vulnerabilities
A critical, remotely exploitable vulnerability has been found in a popular WordPress plugin that allows users to easily customize every aspect of the contact...
Cybercrime
Director of Kaspersky Lab Global Research & Analysis Team Costin Raiu joins the podcast to discuss the latests discoveries surrounding the Epic Turla cyber-espionage...
Risk Management
Cyber Business Intelligence is Quickly Becoming the “Canary in the Boardroom”
Risk Management
Codenomicon, the Finland-based security firm that claimed discovery (along with Google’s Neel Mehta) and branded the Heartbleed bug, has launched a new verification program...
Cloud Security
Security Researcher Explains How Vulnerable Hypervisors Put Enterprises At RiskHypervisors have become an important part of enterprise environments and while they should normally reduce...
Email Security
Today at the Black Hat security conference in Las Vegas, a researcher demonstrated how weaknesses in email and Web filtering solutions can be leveraged...
Endpoint Security
In an effort to provide an enhanced level of protection to Internet Explorer users, Microsoft has decided to introduce a new feature that's designed...
Application Security
For the first time ever, the security teams at Drupal and WordPress have worked together on addressing a remotely exploitable vulnerability that affects tens...
Vulnerabilities
Researchers have identified a new method that can be used to bypass the two-factor authentication (2FA) mechanism that is supposed to give PayPal customers...
Data Protection
Security solutions vendor Mocana has taken somewhat of a sidestep from its focus as a provider of embedded device and mobile security solutions, and...
Malware & Threats
Cisco released on Tuesday its Midyear Security Report which analyzes threat intelligence and cybersecurity trends for the first half of 2014.
Application Security
An Australian security researcher has uncovered a bug that provided him access to an unsecured administration panel for an internal content management system (CMS)...
Mobile & Wireless
A large number of mobile applications are affected by a series of vulnerabilities in the Android platform of Apache Cordova, researchers at IBM Security...
Vulnerabilities
Cisco Systems has patched a vulnerability affecting multiple products that could allow an attacker to intercept traffic. The vulnerability involves the Open Shortest Path First...
Vulnerabilities
All versions of Samba 4.x.x are affected by a vulnerability that could be exploited for remote code execution. Patches for this security hole were...
Endpoint Security
Microsoft announced on Thursday the general availability of the Enhanced Mitigation Experience Toolkit (EMET) 5.0.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)