Vulnerabilities
OTTAWA, - Personal data for as many as 900 Canadian taxpayers was stolen after being made vulnerable by the "Heartbleed" bug, officials in Ottawa...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
After details of the critical “Heartbleed” vulnerability in OpenSSL emerged last week, which enables attackers to steal sensitive data typically protected by TLS encryption,...
Vulnerabilities
WASHINGTON - The US National Security Agency on Friday denied a report claiming it was aware of and even exploited the "Heartbleed" online security...
Tracking & Law Enforcement
Court Reverses Conviction of US 'Security Hacker' WASHINGTON - An appeals court in the United States overturned Friday the conviction of a self-described "security...
Vulnerabilities
OTTAWA - Canada's government on Friday ordered all federal department websites vulnerable to the "Heartbleed" bug to be shut down.
Data Protection
A flaw buried deep inside a widely used cryptographic library has serious implications for Internet security. It's very likely criminals may have had access...
Vulnerabilities
Researchers at security firm High-Tech Bridge uncovered a critical SQL injection vulnerability in a popular ad server.The issue, which affects Orbit Open Ad Server...
Vulnerabilities
Intel's McAfee security division offered some details today about its strategy for protecting the Internet of Things as the number of connected devices continues to...
Vulnerabilities
Flaw Plugs Canada Tax Filing Website at Crunch Time OTTAWA - Canada's tax agency shuttered its website Wednesday after warning that encrypted taxpayer data...
Mobile & Wireless
BlackBerry Patches Remote Code Execution Vulnerability in qconnDoor Service
Network Security
According to Gartner ("Security and Risk Management Scenario Planning, 2020"), by 2020, 30% of global 2000 companies will have been directly compromised by an...
Vulnerabilities
Microsoft pushed out critical patches for Microsoft Office and Internet Explorer today as the company closed the door on support for Windows XP.
Vulnerabilities
Microsoft announced plans today to release four security bulletins as part of next week's Patch Tuesday update, including one aimed at a critical vulnerability...
Vulnerabilities
A team of university professors say they have found evidence that RSA Security adopted a NSA-linked TLS extension to help the spy agency better...
Vulnerabilities
Washington, DC, Earth. April 1, 2014 — A critical vulnerability in the BNL Waste Allocator Load Lifter (Earth Class) industrial operating system, allowing remote...
Network Security
FireEye, a provider of solutions that help companies block advanced cyber attacks, has released a new report put together after analyzing 11 zero-day vulnerabilities...
Network Security
Rapid7 announced a number of enhancements to its IT security data and analytics solutions portfolio this week, including its Nexpose, UserInsight and Metasploit Pro...
Vulnerabilities
Less than a week after announcing that it would suspended service indefinitely due to a conflict with an (at the time) unnamed security researcher...
Vulnerabilities
Vulnerability CVE-2014-1761 in Microsoft Word Could Allow Remote Code Execution, Microsoft Warns - Office 2011 for Mac Affected
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)