Security Infrastructure
Four recently-patched OpenSSL vulnerabilities have been found to affect several industrial products from Siemens.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Data Protection
Nearly half of the IT professionals surveyed recently by Waratek, a company focused on security and management of Java enterprise applications, believe that the...
Cybercrime
An in-depth analysis of a recently discovered piece of malware that's designed to target Linux and Unix Web servers has been published on Thursday...
Vulnerabilities
Software developer vBulletin announced on Wednesday that it had released a patch to address a serious SQL injection vulnerability affecting the its forum software.
Network Security
Several Cisco cable modems and wireless residential gateways are plagued by a vulnerability that can be exploited for remote code execution, the company said...
Vulnerabilities
LibreSSL, the open-source implementation of the SSL/TLS protocol forked from OpenSSL, is unsafe on Linux due to a flaw in the pseudorandom number generator...
Vulnerabilities
Oracle has addressed a total of 113 security vulnerabilities across its product base with the release of its Critical Patch Update (CPU) for July...
Vulnerabilities
A recently discovered vulnerability in WPtouch, a popular plugin that's used to create simple themes for the mobile visitors of WordPress websites, can be...
Identity & Access
A vulnerability in Microsoft's Active Directory service can be exploited by an attacker to change a targeted user's password, Active Directory protection solutions provider...
Vulnerabilities
Google has long had a team of dedicated security researchers looking for security weaknesses in its own products and occasionally other popular software used...
Vulnerabilities
Oracle has clarified that future security patches for Java 7 will still work on Windows XP, but pointed out that it can no longer...
Vulnerabilities
New research from Unisys and the Ponemon Institute underscores that many critical infrastructure companies remain challenged when it comes to security.
Vulnerabilities
Oracle plans to issue a massive security update Tuesday that addresses 113 vulnerabilities.
Identity & Access
The developers of the popular password manager LastPass informed users on Friday of security vulnerabilities reported to the company last year.
Vulnerabilities
Researchers at Lacoon Mobile Security have uncovered an issue in Google's Gmail application for iOS they contend could help an attacker performing a man-in-the-middle...
Network Security
FireEye Operating System (FEOS) updates that address a series of security vulnerabilities have been released for several products, FireEye announced on Tuesday.
Vulnerabilities
Adobe released security updates for Flash Player on Tuesday to address a total of three vulnerabilities, including one that affected several high-profile web sites.
Vulnerabilities
Microsoft released six security bulletins today for Patch Tuesday, including a critical update for Internet Explorer.
Incident Response
Suits and Spooks London is happening on Friday September 12th, with speakers from BAE Systems, EUROPOL, CERT-EU, Kaspersky Lab, CrySyS Lab, Goldman Sachs, PwC...
Network Security
A remote attacker could log into certain NETGEAR switches and execute arbitrary code because of hardcoded credentials installed within the firmware used on the devices,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)