Vulnerabilities
Google is developing its own version of OpenSSL, tentatively dubbed BoringSSL.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
The Heartbleed vulnerability is still leaking the security out of the Internet. A scan of the Internet by Errata Security turned about 300,000 servers...
Vulnerabilities
LinkedIn said that a majority of its users are not affected by the SSL issue reported by security company Zimperium. According to Zimperium, an...
Vulnerabilities
Microsoft Releases Security Advisory for Microsoft Malware Protection Engine
Vulnerabilities
Coverity, a provider of software quality, testing, and security tools, has released the latest version of its integrated suite of testing solutions that enables...
Cybercrime
BitGo, a company that offers a Bitcoin security platform and Bitcoin wallet, today announced that it has raised $12 million in Series A financing...
Training & Awareness
The beauty of hackers, says cybersecurity expert Keren Elazari, is that they force us to evolve and improve. Yes, some hackers are bad guys,...
Vulnerabilities
A new security company is pushing a product that monitors, detects and blocks threats from inside the Java Virtual Machine (JVM).
Cybersecurity Funding
SourceClear Raises $1.5M in Seed Funding from Investors, Including Frank Marshall and Box.com Chief Trust Officer
Network Security
Cisco has addressed a cross-site scripting (XSS) vulnerability affecting the Web management interface of Cisco AsyncOS, the operating system used for some of the...
Vulnerabilities
Vulnerabilities
Twitter has re-enabled the TweetDeck application after taking it down following successful exploitation of a cross-site scripting issue.
Vulnerabilities
WASHINGTON - Twitter said Wednesday it briefly took down its popular TweetDeck application to view and manage messages because of a security flaw, which...
Security Infrastructure
New Framework Helps UK Financial Institutions Improve Resilience to Cyberattacks
Vulnerabilities
Mozilla has released Firefox 30 which fixes a total of seven vulnerabilities affecting the Web browser. Google has also updated its Chrome Web Browser...
Vulnerabilities
Adobe has updated its Adobe Flash Player for Windows, Mac OS X and Linux to address a total of six vulnerabilities that could be...
Vulnerabilities
Yahoo has fixed a bug in Yahoo Toolbar that generated a stored cross-site scripting (XSS) vulnerability in several important online services.
Vulnerabilities
Microsoft patched several dozen vulnerabilities as part of this month's Patch Tuesday, including critical security issues affecting Internet Explorer. The fixes are spread across...
Network Security
SSL encryption, especially services using OpenSSL, was brought into the spotlight more than ever this year.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)