Incident Response
You’d think news of a breach is bad, and that’s the end of the story. However Rafal Los, a security strategist with HP Software, sees things...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Oracle has released a Java update addressing 50 vulnerabilities, two weeks ahead of schedule. The company has faced an uphill security battle in the...
Vulnerabilities
Last week Google announced the details of the third iteration of Pwnium, Google’s contest where it gives cash to security researches who can demonstrate...
Malware & Threats
An update to XProtect on OS X 10.6 has blocked Java entirely. Given the nature of XProtect and the standing security problems in Oracle’s...
Application Security
On the December 2012, an Egyptian hacker who calls himself ViruS_HimA claimed to have breached Yahoo!’s security systems and acquire full access to certain...
Malware & Threats
Mozilla is making changes to an initiative called "Click to Play", which has been in existence since Firefox 17 was released, that prevents Firefox...
Vulnerabilities
Researchers at Rapid7 have uncovered that roughly 40-50 million network-enabled devices are at risk due to vulnerabilities in the Universal Plug and Play (UPnP)...
Vulnerabilities
Google on Monday said they are offering up serious money the security research community to help them find and fix vulnerabilities in Chrome OS.
Vulnerabilities
AV Vendor Avast has announced that they’ll be sponsoring a bug bounty program, in order to reward researchers who discover flaws in their software....
Network Security
Cisco on Wednesday issued a warning that its Wireless LAN Controller (Cisco WLC) products are affected by multiple security vulnerabilities that, if exploited, could...
Vulnerabilities
Many Web applications prompt users to sign in using their Twitter or Facebook accounts. While convenient for users, users have to make sure the...
Vulnerabilities
Oracle isn’t having a good month as far as PR and security is concerned. Adam Gowdiak, a researcher in Poland with Security Explorations, says...
Vulnerabilities
Hackers participating in this year's Pwn2Own contest at the CanSecWest conference in Vancouver will have more than just a web browser to use as...
Vulnerabilities
On the day that the company started a PR push for the Zscaler Application Profiler (ZAP), using a Cross-Site Scripting (XSS) flaw discovered in...
Vulnerabilities
A recently disclosed vulnerability in the Foxit PDF viewer has been patched in the latest software release. The issue, first discovered by Italian security...
Vulnerabilities
Researchers from Cylance, a stealth security firm based in Irvine, California, said they were able to hack into a medical management system and take...
Vulnerabilities
Steps Must be Taken To Protect From Expression Language Injection Vulnerabilities On Applications Built on The Spring Framework
Application Security
Last week, Ruby on Rails (RoR), a popular web application framework, was reported as vulnerable to critical vulnerabilities.
Security Infrastructure
Recent analysis from Frost & Sullivan shows that the security of critical facilities remains the topmost priority for the global oil and gas industry....
Vulnerabilities
Oracle addressed 86 flaws across 10 product groups in its quarterly Critical Patch Update. Some of the high-risk vulnerabilities, if exploited, would allow attackers...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)