Vulnerabilities
Zero-day vulnerabilities garner well-deserved attention, but often it is older vulnerabilities that are at the center of targeted attacks.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Researchers at Rapid7 have uncovered information disclosure issues in SNMP [Simple Network Management Protocol] on embedded devices that could cause them to leak authentication...
Vulnerabilities
Researchers at Symantec say the Elderwood attack platform is at the center of numerous zero-day attacks launched by hacker crews around the world this...
Application Security
PayPal has fixed a filter bypass flaw and a persistent input validation vulnerability affecting its MultiOrder Shipping application. PayPal MultiOrder Shipping (MOS) is a...
Vulnerabilities
BlackBerry released two security advisories today, including one related to the OpenSSL Heartbleed vulnerability.
Vulnerabilities
Microsoft and Adobe Systems released security updates today to fix a number of critical vulnerabilities.
Vulnerabilities
A recently-patched Microsoft Word vulnerability is being used in attacks against government agencies in Taiwan, researchers with Trend Micro found. The vulnerability, CVE-2014-1761, was...
Vulnerabilities
It has been roughly a month since the 'Heartbleed' vulnerability in OpenSSL became public, and for all the publicity, many organizations remain vulnerable.
Network Security
Cybercrime
The new anti-phishing feature currently being tested in the experimental version of Google Chrome does not work as well as intended and poses security...
Vulnerabilities
Microsoft plans to release eight security bulletins next week as part of its Patch Tuesday release. According to its Security Bulletin Advanced Notification, the...
Incident Response
Switching and networking vendor Cisco is warning about serious security vulnerabilities in the Cisco WebEx Players used by businesses for recording and playback of...
Vulnerabilities
Vulnerability disclosures in the second half of 2013 were up 6.5 percent from the first six months of the year industry-wide, according to a...
Vulnerabilities
Imperva Examines the "Non-Advanced Persistent Threat"Not everything about the threats facing today's enterprises is advanced.
Management & Strategy
If You’re Truly Being Proactive, There is No Such Thing as "No News" in Cybersecurity...
Application Security
The Covert Redirect issue, the reportedly "serious vulnerability" uncovered recently in login tools OAuth and OpenID, places the responsibility for user security in the...
Network Security
Attackers are exploiting a recently disclosed zero-day vulnerability in Internet Explorer in campaigns targeting Windows XP users, FireEye researchers have found.
Vulnerabilities
Microsoft has patched an Internet Explorer bug that has come under attack and dominated news headlines in recent days.
Data Protection
A remote management tool used in some enterprises can be exploited by attackers to remotely connect to a host without needing any passwords, according...
Vulnerabilities
Hacking critical infrastructure looks extremely easy in movies, but up until now, there was some reassurance that it wasn't as simple as just typing...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)