Mobile & Wireless
Security researchers Charlie Miller and Chris Valasek join the podcast to talk about their work hacking the into modern vehicles to manipulate steering, acceleration,...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
WASHINGTON - Computer geeks already knew it was possible to hack into a car's computerized systems and potentially alter some electronic control functions. But...
Mobile & Wireless
Daniel Bradberry, Head of Security Tools Development at MWR InfoSecurity, joins Ryan Naraine to talk about the upcoming release of Drozer, an open-source Android...
Malware & Threats
While application sandboxes can isolate threats and protect endpoints from certain types of malware attacks, there are fundamental issues in how they are designed,...
Malware & Threats
Earlier this month, researchers from Bluebox Security uncovered a serious vulnerability in Android that allowed for the modification of apps without affecting the cryptographic...
Vulnerabilities
The majority of enterprises likely have more than one version of Java installed on endpoints, and many of them still are running outdated versions...
Cybercrime
An exploit kit is a framework that automates the exploitation of client-side vulnerabilities, targeting browsers and programs that can be invoked through the browser....
Vulnerabilities
Oracle released its quarterly Critical Patch Update (CPU) on Tuesday, issuing 89 security updates that touch nearly all of its product groups, many of...
ICS/OT
A SCADA software vendor announced a vulnerability bounty program with a twist: instead of paying researchers for bugs, it will offer points that can...
Malware & Threats
Researchers from Trend Micro have discovered a new attack that leverages a combination of exploits to infect systems and target FTP credentials and other...
Malware & Threats
Security researchers from Trend Micro have shared details on an attack targeting personnel at government agencies in Europe and Asia, the latest of many...
Vulnerabilities
Microsoft's bounty program for the Internet Explorer 11 Preview has already begun to payout and payoff.
Vulnerabilities
Coverity, a maker of software development testing tools, has released the latest version of its Coverity Development Testing Platform, a set of tools designed...
Vulnerabilities
'The Spot the Fed' game may get a lot harder at the Defcon security conference this year.
Vulnerabilities
The company behind a popular media player software has called out vulnerability management firm Secunia for continuing to list a vulnerability as "unpatched" and...
Data Protection
HP's security response team has released a fix to address the backdoor vulnerability in its StoreOnce backup systems disclosed late last month by an...
Vulnerabilities
In an analysis of bug bounty programs, a trio of academic researchers concluded that the programs were cheaper to run than hiring expert security...
Mobile & Wireless
Bluebox Security has released a free app designed to help Android users check if their device has been patched for the recently-disclosed “master key...
Vulnerabilities
Microsoft released fixes for 34 security vulnerabilities today in a series of Patch Tuesday updates for Windows, Internet Explorer and other products. Six of...
Mobile & Wireless
Bluebox co-founder Adam Ely joins Ryan Naraine to talk about the severity of the Android ma
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)