Vulnerabilities
Microsoft released 10 security bulletins today, including two critical bulletins that address vulnerabilities in Internet Explorer [IE].
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Training & Awareness
Non-profit organization SAFECode unveiled a series of new training modules to help enterprises train software developers in-house to write secure code.
ICS/OT
Risk Based Security, the primary sponsor of the Open Security Foundation (OSF), has disclosed three SCADA vulnerabilities that impact two of the market’s largest...
Vulnerabilities
Information Sharing: The Wrong Information in the Wrong Hands Could Birth a Threat that Simply Can’t be Handled....
Vulnerabilities
Microsoft is prepping fixes for close to three dozen vulnerabilities for this month's Patch Tuesday, including critical issues affecting Internet Explorer.
Vulnerabilities
Using Google dorks has become a staple on the list of tactics by attackers to find vulnerable websites and servers. But a new do-it-yourself...
Vulnerabilities
Adobe on Wednesday night, issued a Security Advisory (APSA13-03) for a newly disclosed critical security vulnerability in Adobe ColdFusion.
Cybercrime
Microsoft on Wednesday released a one-click Fix it to help protect customers from a recently-disclosed security vulnerability (CVE-2013-1347) affecting Internet Explorer 8 that was used...
Vulnerabilities
Billy Rios and Terry McCorkle, researchers for Cylance, an Irvine, California-based security firm, discovered that Google was using an outdated version of the Niagara...
Cybercrime
Several media sites, including two Washington, DC-based radio stations, have been compromised to infect unsuspecting visitors' systems with fake antivirus software.
Application Security
Smaller open source projects tend to be more secure than proprietary applications, but the opposite is the case for software with more than a...
Application Security
While some best practices such as software security training are effective in getting developers to write secure code, following best practices does not necessarily...
Cybercrime
U.S. intelligence agencies believe Chinese hackers recently accessed a database containing sensitive infrastructure data.
Vulnerabilities
Lack of Open Source Component Management and Control is Putting Production Applications At RiskA significant portion of software is assembled using open source components...
Vulnerabilities
Oracle has decided to delay the release of Java 8 in order to address fundamental security concerns for the beleaguered technology.
ICS/OT
In this episode of the Security Conversations podcast, Cylance Technical Directors Billy Rios and Terry McCorkle join Ryan Naraine to discuss the state of...
Cybercrime
In its Q1 2013 roundup, Trend Micro said that zero-day vulnerabilities, in addition to concentrated attacks that cause high-damage, such as those in South...
Cybercrime
Just five days after Oracle released the patches, criminals have added exploits for Java’s recent flaws to their kits. Security firm F-Secure spotted the...
Vulnerabilities
On Thursday, Rapid7 advised users of Apple’s Safari Web browser to avoid opening “.webarchive” files, after the discovery of a vulnerability in the security...
Cybercrime
WASHINGTON - US authorities charged with overseeing the financial sector are worried about its vulnerability to cyberattacks, they said in a report published Thursday.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)