Vulnerabilities
Security researchers have linked a reputed industrial espionage campaign to the attack that compromised security vendor Bit9.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
SAN FRANCISCO – RSA CONFERENCE 2013 - A two-person panel tackled a provocative question head-on at the RSA Conference on Thursday: Is software security...
Vulnerabilities
SAN FRANCISCO – Cloud-based security and risk management solutions provider Qualys, on Monday, announced new vulnerability management capabilities for users of certain Amazon Web...
Tracking & Law Enforcement
WASHINGTON - Taiwan-based electronics maker HTC settled charges with US regulators that it failed to provide adequate security for smartphones and tablet computers sold...
Vulnerabilities
Adobe on Wednesday issued patches to address recently disclosed security vulnerabilities in its Adobe Reader and Acrobat products that were found being actively exploited...
Vulnerabilities
Last week, security researchers from FireEye identified a PDF zero-day that was being used in targeted attacks. Shortly after, Adobe confirmed the existence of...
Application Security
NT OBJECTives this week launched NTOSpider 6.0, the latest version of its web application scanner, which now enables security teams to scan for vulnerabilities...
Mobile & Wireless
BlackBerry issued fixes this week for critical vulnerabilities in its BlackBerry Enterprise Server (BES) that could result in escalation of privileges and arbitrary code...
Vulnerabilities
After security researchers from FireEye said they identified a PDF zero-day that was being used in targeted attacks, Adobe late Wednesday confirmed the existence...
Cybersecurity Funding
Cylance, a tech security startup that has been operating in a rather secretive fashion until today, made its official launch as a security vendor...
Vulnerabilities
Security researchers from FireEye on Tuesday said they had identified a PDF zero-day that is being used in active attacks, and that they observed...
Vulnerabilities
Vulnerability management has become a term that continues to be thrown around in security circles as a quick and easy path to threat remediation....
Vulnerabilities
After rushing out a Java update to address 50 security vulnerabilities back on Feb. 1, two weeks ahead of schedule, Oracle has acknowledged that...
Vulnerabilities
Adobe issued an update for its Flash Player on Thursday, which hardens the media player against two vulnerabilities being actively exploited. Of note, is...
Vulnerabilities
On Thursday, as part of the ritual of advance notification, Microsoft announced its plans to address 57 security vulnerabilities within Windows, Internet Explorer, and...
Vulnerabilities
SAN JUAN, PUERTO RICO – Trying to identify a vulnerability and fixing it sounds unbelievably frustrating if the person who found it doesn't offer...
Security Infrastructure
WASHINGTON - US military officers have endorsed the principle of pre-emptive cyber-strikes if the United States ever faces an imminent and large-scale digital attack,...
Vulnerabilities
Two researchers have uncovered a new vulnerability in the Transport Layer Security (TLS) and Datagram TLS (DTLS) protocols that allow attackers to recover plaintext...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)