Malware & Threats
Malware hunters have stumbled upon a new Linux worm squirming through an old PHP vulnerability to infect hidden, Internet-enabled devices.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Application Security
UPDATE: Microsoft late Wednesday confirmed a Windows kernel zero-day vulnerability is being exploited in "limited, targeted attacks" against Windows XP users.
Application Security
Danish bitcoin payment processor BIPS has shut down its free online wallet service after hackers launched a two-stage attack that led to the theft...
Vulnerabilities
Researchers discovered a vulnerability in Lenovo network storage devices that allows attackers to gain unauthorized remote read-only access to network-attached storage (NAS) shares.
Vulnerabilities
Just like house keys, passwords can give thieves all they need to get their foot in the door.
Vulnerabilities
Google's push to ferret out security holes in external products has been expanded to include the OpenVPN and Apache https, two of the most...
Management & Strategy
To Breach Your Organization Hackers Only Need to be Right Once. Make Sure that One Time isn’t on Your Watch by Thinking like a...
Mobile & Wireless
Mobile & Wireless
On Wednesday at the Mobile Pwn2Own hacking contest taking place at the PacSec Applied Security Conference in Tokyo, security researchers demonstrated two iPhone exploits...
Application Security
Get Well, Healthcare.gov! Please.
Mobile & Wireless
Researchers Demonstrate Exploits Against Mobile Platforms at Mobile Pwn2Own 2013
Vulnerabilities
Microsoft swatted a recently-discovered, zero-day bug being used in a watering hole attack as part of this month's Patch Tuesday update.
Vulnerabilities
Just recently, reports of a banking Trojan modified to look for SAP GUI (graphical user interface) installations reignited discussion about vulnerabilities impacting SAP ERP...
Vulnerabilities
Microsoft plans to release eight security bulletins this month for Patch Tuesday, including three ranked 'Critical.' The most serious updates affect Internet Explorer and...
Vulnerabilities
Microsoft has expanded its security bounty program in the hopes of keeping sophisticated Windows exploits off the black market.
Mobile & Wireless
Vinnie Liu from Bishop Fox joins Ryan Naraine on the podcast to warn businesses about the security risks associated with the new LinkedIn Intro...
Vulnerabilities
Adobe announced on Wednesday that its popular Flash Player is now protected by an OS X App Sandbox as part of this week’s release...
Data Protection
A critical vulnerability in NETGEAR's ReadyNAS network attached storage devices can allow attackers to gain root access without authentication, according to a warning from...
Network Security
The A-Z of professional Vulnerability Management: A – is for Authenticated Scanning Choices, choices…
Vulnerabilities
Mocana, a provider of the mobile application and embedded security solutions, said that it has removed a key generation algorithm from its NanoCrypto embedded...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)