Funding/M&A
Network security firm Palo Alto Networks announced on Monday that it would acquire privately held security startup Cyvera for roughly $200 million. Tel-Aviv, Israel-based...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Cyberwarfare
GENEVA - Hackers from across Europe flocked to Geneva this weekend, not to play havoc with Swiss computers but to test their ethical hacking...
Cybercrime
According to a recent report from McAfee, the number of digitally signed malware samples tripled in 2013, driven largely by the abuse of automated...
Cybercrime
Threat researchers from Cisco have shared details on a new and rapidly spreading attack targeting web servers running on systems powered by outdated versions...
Vulnerabilities
The creators of the Full Disclosure mailing list have suspended the service indefinitely due to a conflict with an unnamed security researcher.
Application Security
Zero-day vulnerabilities tend to grab headlines, but administrators need to be paying attention to known, and already patched, vulnerabilities, according to a new Imperva...
Vulnerabilities
Late last August, some visitors to the New York Times website received an unexpected surprise - the website was down. The source of the...
Vulnerabilities
Researchers at Core Security uncovered a set of serious vulnerabilities affecting Oracle VirtualBox that can be targeted to remotely execute code. VirtualBox is a...
Vulnerabilities
Researchers at Sucuri have discovered an attack abusing a commonly-used feature of WordPress to launch a distributed denial-of-service (DDoS) attack.
Vulnerabilities
The bad news - attackers have continued to leverage a highly-publicized Internet Explorer vulnerability. The good news is however that vulnerability now has a...
Vulnerabilities
Microsoft plans to release five security bulletins next week for this month's Patch Tuesday, including a fix for a security vulnerability used in attacks...
Cloud Security
Audits
Microsoft on Wednesday launched a new web site dedicated to sharing the untold story behind its Security Development Lifecycle (SDL).
Vulnerabilities
Researchers at Team Cymru have detailed a massive compromise of small office/home office (SOHO) routers throughout Europe and Asia and shined a light on...
Malware & Threats
Earlier this month, security researchers from FireEye discovered a new IE 10 Zero-Day exploit (CVE-2014-0322) that was being used in a watering hole attack...
Management & Strategy
In my previous article for SecurityWeek, I discussed how the city of Atlanta handled a recent snowstorm to illustrate the difference between having the...
Vulnerabilities
Security researchers at Bromium have poked holes in the armor of Microsoft's Enhanced Mitigation Experience Toolkit.
Mobile & Wireless
WASHINGTON - The Facebook deal for WhatsApp drew attention for its whopping price tag, but has also brought out fresh criticism over security for...
Mobile & Wireless
iOS SSL Validation Flaw Enables Man-in-the-Middle Attacks
Application Security
Don’t Assume Systems Are Secure Because They are Running Linux - Administrators Must Make Them Secure.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)