Endpoint Security
While conducting penetration testing for one of its customers, Offensive Security uncovered three zero-day vulnerabilities in Symantec Endpoint Protection (SEP) that can be exploited...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
A cybersecurity audit of the National Oceanic and Atmospheric Administration uncovered an agency challenged by inconsistent security controls.
Vulnerabilities
A new study published by HP on Tuesday reveals that 70% of the most popular Internet of Things (IoT) devices contain serious vulnerabilities.
Vulnerabilities
A security researcher has released details of an issue affecting the Instagram application for iOS devices that exposes users to hackers launching man-in-the-middle attacks.
Vulnerabilities
Only 3 percent of external-facing servers in the world's largest companies have been fully protected from the Heartbleed vulnerability, researchers found.
Endpoint Security
Several of the most popular antivirus products contain vulnerabilities that can be exploited locally or remotely, a security researcher revealed at the SyScan 360...
Mobile & Wireless
Chief Technology Officer at Bluebox Security Jeff Forristal joins the podcast to discuss a
Mobile & Wireless
A serious vulnerability exists in the Android operating system, which could allow malicious apps to impersonate well-known trusted apps such as Google Wallet, researchers...
Data Protection
Secure embedded L4 (seL4), said to be the world's most highly-assured operating system, has been released as open source, Australia's Information and Communications Technology...
Privacy
The rating given by Uber drivers to their passengers could have been accessed until a few hours ago by simply pasting a piece of...
ICS/OT
Siemens has released version 7.3 of the SIMATIC WinCC supervisory control and data acquisition (SCADA) system to address several vulnerabilities, most of which can...
Vulnerabilities
Bugcrowd, the crowdsourced security company that specializes in bug bounty programs, has released a guide to help organizations in setting up responsible disclosure programs.
Data Protection
Security services provider and certificate authority Comodo announced on Wednesday the launch of Comodo SecureBox, a solution designed to help organizations protect the important...
Data Protection
Many software development firms still fail to ensure that the components they use don't contain security vulnerabilities, according to a report published on Tuesday...
Vulnerabilities
Firefox 31 was released by Mozilla on Tuesday and fixes a total of 11 vulnerabilities affecting earlier versions.
Risk Management
Risk management is a hot topic these days. Many industry publications have shifted their focus away from compliance or security to risk management practices....
Vulnerabilities
A presentation on cracking the anonymity of the TOR network scheduled to be held at the upcoming Black Hat USA conference in Las Vegas...
Vulnerabilities
IBM is advising the owners of certain KVM switches to update the firmware on their devices to address a total of three security holes...
Management & Strategy
The beginning of July always marks a turning point. Summer finally feels like it’s in full swing, vacations, BBQs, and summer camps are ramping...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)