Network Security
Tripwire has released a free Python script that’s designed to help organizations determine if their servers are affected by the recently patched Man-in-the Middle...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Highway dynamic message signs (DMS) from LED display and scoreboard systems manufacturer Daktronics are vulnerable to cyberattacks, the Department of Homeland Security's ICS-CERT (Industrial Control...
Vulnerabilities
OpenSSL has been updated to address several security issues, including a flaw that appears to have existed in the code for more than 15...
Network Security
The Defense Advanced Research Projects Agency (DARPA) revealed on Tuesday that the final competition for its automated security systems development challenge will take place...
Vulnerabilities
Researchers have uncovered vulnerabilities in a popular WordPress plugin that could be used to escalate privileges and conduct cross-site scripting attacks.
Data Protection
While most organizations have patched the Heartbleed bug in their OpenSSL installations, a security expert has uncovered new vectors for exploiting the vulnerability, which...
Cybersecurity Funding
The Linux Foundation’s Core Infrastructure Initiative (CII) announced on Thursday the open source software projects selected for the first round of funding.
Mobile & Wireless
Vulnerabilities
Google has launched a new game to teach Web application developers how to spot cross-site scripting (XSS) bugs in their code.
Mobile & Wireless
Vulnerabilities
Image-based social network Pinterest has launched a bug bounty program powered by the crowdsourced-driven vulnerability disclosure platform Bugcrowd.
Cybersecurity Funding
Vulnerability disclosure platform HackerOne has secured $9 million in a Series A round of funding, and has appointed Katie Moussouris, former senior security strategist...
Data Protection
TrueCrypt is not safe to use since it might contain unfixed security issues, warns a message apparently coming from the developers of the encryption...
Vulnerabilities
Microsoft has launched a new online service designed to provide IT professionals a list of the security bulletins relevant for the products used by...
Vulnerabilities
Thinking of changing the Windows registry to continue getting updates for Windows XP? Not so fast, Microsoft said.
Vulnerabilities
Apple has released Safari 7.0.4 and Safari 6.1.4 to address a total of 22 vulnerabilities affecting WebKit, the open source rendering engine that powers...
Vulnerabilities
French security research company Vupen has published the details of the use-after-free vulnerability its team exploited at Pwn2Own 2014 to hack Mozilla Firefox. At...
Vulnerabilities
Hewlett Packard's Zero Day Initiative has released information about a zero-day vulnerability in Internet Explorer 8 that empowers the attacker to remotely execute code.
Vulnerabilities
Just as a good novel has themes, so too do the security challenges facing industrial control systems.
Vulnerabilities
Google has announced the availability of Chrome 35 for all platforms. In addition to new features and improvements, the latest Windows, Mac and Linux...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)