Application Security
The Open Web Application Security Project (OWASP) released an update to its Top 10 list of risks facing developers. As in previous years, injection...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Mobile & Wireless
BlackBerry released two security advisories on Tuesday, alerting customers about vulnerabilities that affect its BlackBerry Z10 smartphones and BlackBerry PlayBook tablets.
Vulnerabilities
Microsoft is urging businesses to prioritize a patch for Microsoft Office in order to thwart a spate of ongoing, targeted attacks that have appeared...
Vulnerabilities
Google has increased the amount of award money in its bounty program for researchers who discover and report vulnerabilities in Google products.
Vulnerabilities
Microsoft is planning for a relatively quiet Patch Tuesday next week that features only one critical security bulletin.The 'Critical' bulletin addresses issues in Internet...
Application Security
On Tuesday, Jerry Davis, the VA’s former CISO, told members of the House Veterans' Affairs oversight and investigations subcommittee the sensitive personal information the...
Vulnerabilities
Oracle has faced an uphill battle when it comes to Java and security. As soon as a series of fixes are released, someone somewhere...
Vulnerabilities
Robert Kugler, a 17-year-old German student submitted a bug report to PayPal’s bounty program earlier this month, and was told he was too young...
Vulnerabilities
Seven days – that is how long Google believes security researchers should have to give vendors to provide mitigations or a patch before disclosing...
Vulnerabilities
Drupal.org, home to one of the Web’s most popular Content Management System (CMS) platforms, has issued an alert to community members and reset all...
Vulnerabilities
SecurityWeek has learned that Secunia, a Danish vulnerability management firm, disclosed an unpatched vulnerability within an image viewing application used by organizations in both...
Vulnerabilities
The Department of Homeland Security warned its employees their personal data may have been exposed as a result of a vulnerability in the software...
Vulnerabilities
Accuvant Labs has published details concerning a Java vulnerability exploited during the Pwn2Own contest earlier this year. The flaw was patched in April by...
Vulnerabilities
The majority of small to medium enterprises (SMEs) are either unaware of, or defenseless, against the most common threats to their networks posted by...
Incident Response
The U.S. Department of Homeland Security (DHS) is developing a system that will enable classified vulnerability data to be shared with the private sector. The...
Management & Strategy
PARIS - In this episode of Security Conversations, Ryan Naraine talks to security researcher Stephen Ridley
Network Security
CORE Security, a provider of security intelligence and penetration testing tools, this week announced a significant upgrade to CORE Insight Enterprise, the company’s vulnerability...
Cybercrime
Bitcoin’s wiki defines it to be “an experimental, decentralized digital currency”. As with any experimental system, if it proves to be successful then it...
Vulnerabilities
Researchers have uncovered a targeted attack against political rights activists in China in which a malicious Word document exploits a vulnerability in Microsoft Office...
Application Security
Microsoft's coding practices and methodology complies with an international standard for developing secure software, the company said Tuesday.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)