Vulnerabilities
Oracle on Tuesday released its quarterly Critical Patch Update (CPU) which addresses 127 vulnerabilities across many products, including 51 vulnerabilities in Java.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Attackers are increasingly dodging the address space layout randomization [ASLR] mechanisms used to thwart buffer overflow attacks.
Vulnerabilities
A security researcher has found a backdoor in firmware used in a number of D-Link routers that could enable a hacker to alter the...
Vulnerabilities
Security researchers say a previously undisclosed Internet Explorer zero-day patched by Microsoft this week has been actively used in targeted attacks since at least...
Vulnerabilities
Cross-site request forgery (CSRF) and cross-site scripting vulnerabilities are not going away.
Vulnerabilities
Microsoft released eight security bulletins – including four rated Critical – to address 26 vulnerabilities in Windows, Internet Explorer and other products in this...
Compliance
Trustwave has launched a new subscription-based, penetration testing service that lets businesses schedule, manage and adjust penetration tests through a cloud-based portal.
Cybersecurity Funding
Cigital, a provider of software security services and solutions, announced today that private equity firm LLR Partners has made a $50 million equity investment...
Endpoint Security
Qualys, a provider of cloud-based security and compliance solutions, has released a new version of its free service designed to help users keep their...
Risk Management
Vulnerability management software company Rapid7 has launched an ambitious community project to scan the public Internet, organize the results and share the data with...
Mobile & Wireless
Costin Raiu of Kaspersky Lab's global research and analysis team joins the podcast and talks to Ryan Naraine about the global implications of the
Vulnerabilities
The (ISC)2 security professional association released a new survey showing that C-level executives consider application vulnerabilities and mobile devices as being the biggest threats...
Network Security
Cisco released its semiannual IOS Software Security Advisory Bundled Publication on Wednesday.
Mobile & Wireless
These days, everything’s “smart.” Everything’s “connected.” Cars, watches, thermostats, power meters, home security systems, glucose meters, toilets, you name it. On the one hand,...
Vulnerabilities
Cisco Systems has released an open source tool designed to make life easier for penetration testers.
Vulnerabilities
New research from IBM's X-Force team names SQL injection as the most commonly traveled pathway to a successful breach during the first half of...
Vulnerabilities
The root cause of many serious security incidents is some vulnerability in the implementation of the serialization-deserialization process. Just recently, such vulnerability was fixed...
Vulnerabilities
Security researchers at FireEye have observed a campaign targeting organizations in Japan that is leveraging the Internet Explorer zero-day Microsoft warned users about last...
Mobile & Wireless
Hackers from the Chaos Computer Club (CCC) say they have successfully bypassed the biometric security of Apple's recently released Touch ID on an iPhone...
Mobile & Wireless
Just days after Apple released iOS 7, researchers from web security company Cenzic say they have found a security flaw stemming from Apple’s voice-activated...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)