Vulnerabilities
Adobe released security updates for Flash Player on Tuesday to address a total of three vulnerabilities, including one that affected several high-profile web sites.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Microsoft released six security bulletins today for Patch Tuesday, including a critical update for Internet Explorer.
Incident Response
Suits and Spooks London is happening on Friday September 12th, with speakers from BAE Systems, EUROPOL, CERT-EU, Kaspersky Lab, CrySyS Lab, Goldman Sachs, PwC...
Network Security
A remote attacker could log into certain NETGEAR switches and execute arbitrary code because of hardcoded credentials installed within the firmware used on the devices,...
Vulnerabilities
The existence of a vulnerability in a portal used internally by PayPal staff was recently disclosed by Germany-based security research company Vulnerability Lab.
Vulnerabilities
Wi-Fi enabled LED light bulbs manufactured by LIFX have been hacked by researchers from Context Information Security, the company said Friday.
Vulnerabilities
Microsoft announced plans today to release six security bulletins as part of this month's Patch Tuesday.
Vulnerabilities
Multiple Vulnerabilities Found in Cisco's VoIP Manager
Vulnerabilities
Regression and security fixes are included in the latest version of the Python programing language released by the Python Software Foundation on July 1.
Vulnerabilities
Researchers from Offensive Security have found a way to disable the protection systems provided by the latest version of Microsoft's Enhanced Mitigation Experience Toolkit...
Vulnerabilities
Researchers from Sucuri have identified a remote file upload vulnerability in a popular WordPress plugin that has been downloaded more than 1.7 million times....
Vulnerabilities
Updates containing fixes for security vulnerabilities were made available by Apple on Monday for iOS, Safari, OS X Mavericks and Apple TV.
Vulnerabilities
Microsoft announced last week that it would stop sending security notifications via email, but the company has since changed its mind and has promised...
Data Protection
A Google Drive issue that in certain cases exposed the original URLs of shared documents has been fixed by Google, the company announced on...
Vulnerabilities
A serious security hole that has been plaguing the Lempel-Ziv-Oberhumer (LZO) algorithm for the past 20 years has been finally patched.
Mobile & Wireless
Cybercrime
Flash-based ads are being used by an advertising network to lure the visitors of various websites to a landing page that has been set...
Vulnerabilities
IBM researchers uncovered a critical vulnerability affecting everyone not running the most up-to-date version of Google Android.
Vulnerabilities
Security researchers have found a way to bypass the two-factor authentication (2FA) mechanism used by PayPal to enhance the security of customers' accounts.
Vulnerabilities
Security researchers have uncovered a total of 22 vulnerabilities affecting the custom Java Virtual Machine (JVM) implementation used in Oracle Database.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)