Vulnerabilities
Siemens has updates available for two of its products affected by the Heartbleed vulnerability.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Application Security
The recently-disclosed Heartbleed vulnerability has forced many system administrators to promptly patch affected servers. That was just the easy part. The hard work lies...
Vulnerabilities
Adobe has released security updates for its Adobe Flash Player to address vulnerabilities that are being exploited in the wild.
Cybersecurity Funding
Synack, a startup that has built a platform for crowdsourced security testing, announced on Thursday that it has received $7.5 million in a Series...
Data Protection
Researchers from FireEye have discovered a nasty zero-day exploit that bypasses the ASLR and DEP protections in Microsoft Windows and is being used in targeted...
Vulnerabilities
Apple customers may find themselves busy this week applying patches issued by the company across a number of products.
Application Security
After details of the critical “Heartbleed” vulnerability in OpenSSL emerged earlier this month, there has been widespread concern among system administrators, network security teams,...
Vulnerabilities
Oracle issued an advisory today listing both security updates and detailing what is known and unknown about the Heartbleed vulnerability's impact on Oracle products.
Network Security
Attackers Exploit Heartbleed Vulnerability to Circumvent Multi-factor Authentication on VPNs and Hijack Active User Sessions
Vulnerabilities
A new report from the U.S. Government Accountability Office (GAO) criticizes the Securities and Exchange Commission (SEC) for failing short in the area of...
Vulnerabilities
WASHINGTON - Security flaws in many satellite telecommunications systems leave them open to hackers, raising potential risks for aviation, shipping, military and other sectors,...
Vulnerabilities
Oracle just released a massive security update that covers 104 vulnerabilities across its product portfolio. Thirty-seven of the vulnerabilities affect Oracle Java SE. According...
Vulnerabilities
SQL injection attacks have been at the center of many data breaches big in small during the past. Yet it continues to plague organizations...
Vulnerabilities
WASHINGTON - The heartache from the Heartbleed Internet flaw is not over, and some experts say the fix may lead to online disruption and...
Vulnerabilities
LONDON - British parenting website Mumsnet is the latest organization to have been hacked due to the "Heartbleed" bug, founder Justine Roberts revealed on...
Vulnerabilities
Akamai Technologies admitted custom code thought to protect against the Heartbleed vulnerability has a flaw of its own and has forced the company to...
Vulnerabilities
OTTAWA, - Personal data for as many as 900 Canadian taxpayers was stolen after being made vulnerable by the "Heartbleed" bug, officials in Ottawa...
Vulnerabilities
After details of the critical “Heartbleed” vulnerability in OpenSSL emerged last week, which enables attackers to steal sensitive data typically protected by TLS encryption,...
Vulnerabilities
WASHINGTON - The US National Security Agency on Friday denied a report claiming it was aware of and even exploited the "Heartbleed" online security...
Tracking & Law Enforcement
Court Reverses Conviction of US 'Security Hacker' WASHINGTON - An appeals court in the United States overturned Friday the conviction of a self-described "security...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)