Vulnerabilities
Joint research by Rapid7 and an independent security researcher has spotlighted vulnerabilities in embedded technology used to remotely manage servers known as baseboard management controllers...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Network Security
Businesses and government agencies are a popular target for attackers looking to steal information and destroy networks, and they are woefully unprepared to deal...
Privacy
Mark Dowd, co-founder of Azimuth Security, disclosed details of vulnerabilities he discovered in the ZRTPCPP library last week, which is a core component for...
Application Security
A technical advisory from Command Five, an Australian security consultancy, has outlined the recently patched flaws in Atlassian’s Crowd Single Sign-on (SSO) software package....
Vulnerabilities
Norwegian browser maker Opera Software has confirmed that a targeted internal network infrastructure attack led to the theft of a code signing certificate that...
Vulnerabilities
Security response personnel at HP are "actively working on a fix" for a potentially dangerous backdoor in older versions of its StoreOnce backup product...
Audits
In a survey of CIOs, system administrators, and compliance auditors, SANS Institute found that the awareness of the Critical Security Controls is very high,...
Management & Strategy
Microsoft's Katie Moussouris joins Ryan Naraine to explain the thinking behind the new bug bounty programs and why it will entice security researchers to...
Application Security
Facebook on Friday said that phone numbers and email addresses belonging to roughly 6 million of its users had been improperly shared due to...
Management & Strategy
Adobe's new Chief Security Officer Brad Arkin joins Ryan Naraine to discuss the task of securing the company's assets, the importance of putting roadblocks...
Data Protection
During his talk earlier this month at RSA Conference Asia Pacific 2013, Alexander Polyakov, CTO of ERPScan, disclosed that there are thousands of unpatched...
Vulnerabilities
Craig Heffner, a vulnerability researcher for Tactical Network Solutions in Columbia, MD, is returning to Black Hat this summer with a presentation that will...
Vulnerabilities
Microsoft Dangles “Mitigation Bypass Bounty” of $100,000 for Exploit Techniques That Can be Used Against Windows
Application Security
Risk I/O, a vulnerability intelligence platform designed to help organizations efficiently report and mitigate security vulnerabilities, on Wednesday announced that it now analyzes real-time,...
Cyberwarfare
After analyzing many of the most popular WordPress plugins, researchers found many of them contained serious security vulnerabilities.
Vulnerabilities
Oracle pushed out patches for 40 security vulnerabilities in Java SE today. Virtually all of the vulnerabilities can be exploited over a network without...
Vulnerabilities
ICS-CERT published an advisory last week centered on a hard-coded password vulnerability that impacts some 300 medical devices – including implanted devices such as...
Network Security
EiQ Networks, a provider of security, risk and compliance solutions, this week announced ThreatVue, a security monitoring solution that automates the analysis of essential...
Cybercrime
Trend Micro researchers have found evidence of the Rarstone remote access tool (RAT) in targeted attacks against various organizations in the telecommunications and energy...
Malware & Threats
WASHINGTON - US authorities on Thursday warned makers of medical devices and hospital networks to step up efforts to guard against potential cyber attacks....
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)