Mobile & Wireless
HP's Zero Day Initiative (ZDI) is dangling more than $300,000 in cash to entice hackers to demonstrate zero-day attacks against the Apple iOS, Android,...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Oracle Rolls Out New Monitoring, Security Features for Java SE 7
Vulnerabilities
Fresh off of raising $24 million in a Series A funding round, security startup BitSight Technologies on Tuesday launched its first offering designed to...
Mobile & Wireless
Joining Microsoft who patched 47 security vulnerabilities across its product portfolio, and Adobe who issued security fixes for its products, BlackBerry on Tuesday issued...
Vulnerabilities
Microsoft patched 47 security vulnerabilities across its product portfolio today as part of a massive Patch Tuesday update.
Vulnerabilities
Hackers are increasingly trying to exploit PHP 'SuperGlobal' variables as a way to compromise their targets, according to a new report from Imperva.
Vulnerabilities
Tenable Network Security, a maker of vulnerability management solutions, this week announced SecurityCenter 4.7, the latest release, of its security suite that helps customers...
Vulnerabilities
Coverity, a provider of development testing solutions, announced the results of its second Coverity Scan Project Spotlight this week, which analyzed the Python open...
Cloud Security
The DevOps movement seeks to improve the integration of development and operations teams with the ultimate goal of accelerating the delivery of critical applications....
Vulnerabilities
HP Fortify Static Code Analyzer 4.0 Boosts Software Security Assessment Time HP announced the latest version of its static software security assessment tool this...
Data Protection
When Devising a Security Strategy that will Work for Your Organization or Industry, you Must Start with the Concept of Value...
Vulnerabilities
Security researchers are recommending Java users upgrade to the latest version due to a new exploit that has made its way into the Neutrino...
Vulnerabilities
SAN FRANCISCO - Internet users have raised more than $11,000 to reward a Palestinian security researcher who hacked into Facebook chief Mark Zuckerberg's profile...
Vulnerabilities
Microsoft has re-issued a patch for a Windows Server vulnerability after discovering an issue that could prevent the Active Directory Federation Services (AD FS)...
Vulnerabilities
Microsoft has a blunt warning for computer users still using Windows XP: Upgrade to a newer operating system now or risk exposure to zero-day...
Vulnerabilities
SAN FRANCISCO - A researcher who hacked into Facebook chief Mark Zuckerberg's profile to expose a security flaw won't get the customary reward payment...
Vulnerabilities
A security researcher has outlined an attack against the Philips hue smart lighting system that could quite literally leave victims in the dark. Due...
Vulnerabilities
Google has pushed out patches to partners to address a cryptographic vulnerability tied to the theft of bitcoins from Android users.
Vulnerabilities
Just 24 hours after shipping a critical Exchange Server 2013 patch to cover several remote code execution vulnerabilities, Microsoft has yanked the update because...
Vulnerabilities
Microsoft released fixes for 23 security vulnerabilities today including critical patches for Internet Explorer and Windows. The fixes are spread across eight security bulletins....
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)