Vulnerabilities
SAP has rolled out additional protections for insecure deserialization bugs resolved in NetWeaver AS Java recently.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
It’s unclear if the new Oracle E-Business Suite flaw, which can be exploited remotely without authentication, has been used in the wild.
Vulnerabilities
Patches were rolled out for more than 200 vulnerabilities in Junos Space and Junos Space Security Director, including nine critical-severity flaws.
Vulnerabilities
The unpatched vulnerabilities allow attackers to execute arbitrary code remotely and escalate their privileges.
Mobile & Wireless
Apple has announced significant updates to its bug bounty program, including new categories and target flags.
Vulnerabilities
Hundreds of internet-exposed Oracle E-Business Suite instances may still be vulnerable to attacks.
Vulnerabilities
The Medusa ransomware operators exploited the GoAnywhere MFT vulnerability one week before patches were released.
Network Security
The Year 2036/2038 problem is a bug that will be triggered in more than a decade, but hackers could exploit it today against ICS...
Vulnerabilities
The flaw could lead to local code execution, allowing attackers to access confidential information on devices running Unity-built applications.
Data Breaches
Oracle has informed customers that it has patched a critical remote code execution vulnerability tracked as CVE-2025-61882.
Vulnerabilities
The security defect can be exploited remotely via crafted HTTP/S requests to a vulnerable device’s web user interface.
Vulnerabilities
Patched in mid-May, the security defect allows remote unauthenticated attackers to execute arbitrary commands with root privileges.
Vulnerabilities
High-severity flaws were patched in Chrome’s WebGPU and Video components, and in Firefox’s Graphics and JavaScript Engine components.
Vulnerabilities
Three vulnerabilities have been patched with the release of OpenSSL updates.
Vulnerabilities
Impacting VMware Aria Operations and VMware Tools, the flaw can be exploited to elevate privileges on the VM.
Vulnerabilities
The flaws could allow attackers to escalate privileges, manipulate notifications, and enumerate usernames.
Vulnerabilities
The vulnerability could allow local, low-privileged attackers to execute commands with root privileges, leading to full system compromise.
Vulnerabilities
Eight days before patches, a threat actor exploited CVE-2025-10035 as a zero-day to create a backdoor admin account.
Vulnerabilities
Leading to remote code execution and privilege escalation, the flaws were exploited on Cisco ASA 5500-X series devices that lack secure boot.
Network Security
The security defect allows remote attackers with administrative privileges to execute arbitrary code as the root user.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)