Network Security
Risk I/O, a vulnerability intelligence platform designed to help organizations report and mitigate security vulnerabilities, has released the latest version of its SaaS-based vulnerability...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Microsoft issued a fix-it tool to help users address a security vulnerability targeted in attacks against Internet Explorer 10.
Management & Strategy
Synopsys, a company that provides tools and services for designing chips and electronic systems, said on Wednesday that it would acquire Coverity, a provider of...
Vulnerabilities
Secure application development programs are making progress reducing the prevalence of well-known vulnerabilities, but others appear to be growing in frequency, according to a...
Vulnerabilities
Along with issuing a warning on Tuesday about multiple vulnerabilities in Belkin WeMo Home Automation devices, security firm IOActive accused Belkin of being unresponsive...
Vulnerabilities
Early Tuesday, Security firm IOActive issued a warning about multiple vulnerabilities in Belkin WeMo Home Automation devices that could give attackers the ability to...
Vulnerabilities
It is not uncommon for vendors to give security advisories. This time however, it appears a hacker gave at least one victim an unexpected...
Vulnerabilities
Security firm IOActive warned on Tuesday that it has uncovered multiple vulnerabilities in Belkin WeMo Home Automation devices that could affect over 500,000 users.
Cybercrime
If there was one topic that got people talking at CES in January, it was the Internet of Things (IoT). Once the stuff of...
Vulnerabilities
Microsoft said it is investigating an Internet Explorer vulnerability at the center of reports of attacks against IE 10.
Vulnerabilities
Apple has published a new guide designed to help developers of Mac OS and iOS applications build more secure programs by design.
Cyberwarfare
Security researchers from FireEye have discovered a new IE 10 Zero-Day exploit (CVE-2014-0322) being used in a watering hole attack on the US Veterans...
Vulnerabilities
Absolute Software hit back on Kaspersky Lab's assertion that its Computrace software can be exploited by hackers.
Vulnerabilities
Security researchers at Kaspersky Lab claim in a new report that the Computrace agent residing in the firmware of many popular laptop and desktop...
Vulnerabilities
BlackBerry issued a security advisory Tuesday to address a vulnerability that could enable an attacker to impersonate a legitimate user on a local machine...
Vulnerabilities
Microsoft added two new security updates into the mix of Patch Tuesday bulletins being released today.
Management & Strategy
On Tuesday, a rare weather phenomenon mixed with poor planning and an overdependence on cars conspired to create a perfect storm ~ CNN
Vulnerabilities
Microsoft is planning to release five security bulletins next week for this month's Patch Tuesday, including two that are rated 'critical.'
Vulnerabilities
The good news is the total number of new software vulnerabilities reported last year through November dropped six percent from what it was during...
Vulnerabilities
On Tuesday afternoon, Adobe released an out-of-band security update to address a critical zero-day security vulnerability in Adobe Flash Player. The remotely exploitable vulnerability...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)