Malware & Threats
A malicious campaign that started last summer is once again targeting Uyghur activist groups in China. The latest developments in this year-long fight is...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Malware & Threats
Attackers are exploiting a vulnerability in a popular Website configuration tool to gain remote access to Web servers, Cisco researchers said in an advisory.
Vulnerabilities
A researcher at Rapid7 has discovered that some 114,000 misconfigured serial port servers that connect business IT and industrial control systems to the Internet...
Risk Management
New SSH Risk Assessment Tool Enables Auditors and Security Teams to Collect and Report on SSH-Related Access Compliance Issues
Vulnerabilities
Oracle on Tuesday released its quarterly Critical Patch Update (CPU) for April, which addressed a whopping 128 security issues across multiple product families.
Vulnerabilities
The Federal Aviation Administration has said that a researcher’s claims that he could hack an aircraft in-flight using only an Android application and a...
Mobile & Wireless
A researcher known for unlocking Motorola handsets, has leveraged a vulnerability in the TrustZone kernel to bypass the bootloader restrictions on several devices sold...
Network Security
Java has been a very hot topic for security managers this year due to a steady stream of 0-day Java vulnerabilities that have been...
Vulnerabilities
A series of vulnerabilities in Linksys routers spotlighted by a researcher earlier this month have been addressed by a firmware update released last year.
Cybercrime
Attackers appear to be adding social networking sites to their repertoire of attacks targeting Tibetan activists.
Vulnerabilities
Patch Tuesday this month comes with nine security bulletins and one security-related reminder – Windows XP is a year away from its end-of-life.
Cybercrime
Veracode, known for their application security testing offerings, has released their annual report on the state of software security, which focuses on software vulnerability...
Vulnerabilities
Microsoft is planning to release nine security bulletins this month as part of its Patch Tuesday release.
Vulnerabilities
Lack of formal documentation, event monitoring, and permissions and privileges control, remain common among industrial control system environments, according to the Department of Homeland...
Application Security
According a new report from Kaazing, real-time applications are both a curse and a blessing for organizations the world over. Kaazing, the company behind...
Cyberwarfare
On Tuesday, President Obama signed the continuing resolution that will keep the government running though the end of the fiscal year – avoiding a...
Vulnerabilities
Java exploits have become popular additions to many crimeware kits for good reason. According to Websense, close to 94 percent of endpoints running Oracle...
Application Security
Vulnerabilities
The password hashing algorithm used in some versions of the Cisco IOS system running on its routers and switches is vulnerable to brute-force attacks,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)