Malware & Threats
Security Explorations, a start-up from Poland credited with the discovery of several Java flaws, has turned one of their discoveries out to the public...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Mobile & Wireless
Apple on Tuesday released iOS 6.1.3, the latest software update for iPhone and iPads, which fixes a security flaw that lets anyone with physical...
Tracking & Law Enforcement
A casino in Melbourne, Australia is hoping to recuperate their losses, after a high-stakes card player scammed them out of millions of dollars before...
Black Hat
A Russian security researcher accused China-based Huawei during a Black Hat Europe presentation last week of being slow to address security issues, stating that...
Vulnerabilities
Gamers have an additional safety consideration this morning, thanks in part to the platforms developed by houses such as EA, which expose them to...
Vulnerabilities
An ongoing malicious email campaign is masquerading as an unpaid invoice, a Kaspersky Lab researcher said Thursday.
Vulnerabilities
Apple on Thursday released Mac OS X Mountain Lion v10.8.3 along with a wave of security updates spanning numerous products ranging from the operating system kernel to...
Vulnerabilities
Adobe released a regularly-scheduled update for Flash Player addressing four critical vulnerabilities on Tuesday.
Vulnerabilities
A vulnerability in a platform used to integrate different systems controlling devices such as heating and ventilation systems could allow attackers to remotely execute...
Vulnerabilities
Microsoft is planning to release seven security bulletins next week as part of this month's Patch Tuesday.
Vulnerabilities
Java, as it stands as a development platform, has had a terrible week in the news due to security issues. The problems keep mounting...
Application Security
According to a new report from application security firm Cenzic, Web application vulnerabilities remain an issue, as 99% of the applications they tested were...
Vulnerabilities
Researchers have uncovered intriguing clues hinting that the recent fake Mandiant report has a China connection.
Vulnerabilities
Exclusive Podcast: Vupen CEO Chaouki Bekrar Addresses Zero Day Marketplace Controversy at CanSecWest
Ryan Naraine talks to Vupen CEO Chaouki Bekrar about the controversies surrounding the sale of zero-day vulnerabilities and exploits, his company’s business dealings and...
Vulnerabilities
With millions of dollars on the line, Google took the smart money this week and patched Chrome ahead of today’s Pwn2Own and Pwnium competitions...
Cybercrime
A vulnerability patched in February by Oracle has been added to the Blackhole Exploit Kit, researchers have discovered. This wouldn’t normally be a headline...
Vulnerabilities
For the third time in less than a month, organizations and home users who are still using Java, for whatever reason that may be,...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)