Vulnerabilities
Adobe on Tuesday released a hotfix to address four vulnerabilities affecting ColdFusion running on Windows, Mac OS and UNIX platforms.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
A critical authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Malware & Threats
On Monday, Kaspersky Lab uncovered details of a complex cyber espionage campaign dubbed 'Operation Red October' that has been targeting specific groups throughout the...
Vulnerabilities
Microsoft on Monday released a patch to address the recently discovered Internet Explorer vulnerability linked to a series of watering hole attacks.
Vulnerabilities
Last week, researchers discovered a Java vulnerability being widely exploited online, as it was included in several crime kits, including Blackhole and Cool Exploit....
Vulnerabilities
Microsoft has said it would release a patch this afternoon, out-of-band, that will address the recently discovered Internet Explorer vulnerability that has been used...
Vulnerabilities
Foxit, the popular alternative to Adobe’s Reader software for PDF files, and the application often recommended as a more secure alternative, has been tagged...
Vulnerabilities
New Java Vulnerability Being "Massively Exploited" in the WildAnother Java zero-day security flaw is actively being targeted in the wild, and exploits are already...
Privacy
University researchers developed a way to encode hidden messages using the silent portions of a Skype call.
Vulnerabilities
Ruby on Rails maintainers have released another critical update to the popular Web application framework to address some serious issues.
Vulnerabilities
A security researcher has uncovered two zero-day vulnerabilities in Symantec's desktop encryption product. One of the security issues could potentially be used to trigger...
Vulnerabilities
Microsoft released seven security bulletins today in its first Patch Tuesday update of the year. Two of the seven bulletins are rated 'critical', the...
Compliance
Dell SecureWorks Launches Vulnerability Management Offering for Virtual and Cloud Deployments Looking to attract more business customers to the cloud, Dell SecureWorks announced on...
Vulnerabilities
A company that deals vulnerability intelligence and pays for research has said they were able to bypass the"Fix It" measure offered by Microsoft recently.
Vulnerabilities
Graphics card maker NVIDIA on Saturday quietly released a driver update (version 310.90) that fixes a recently-uncovered security vulnerability in the NVIDIA Display Driver...
Vulnerabilities
Adobe on Thursday issued a security advisory for ColdFusion customers related to three vulnerabilities affecting ColdFusion running on Windows, Mac OS and UNIX platforms,...
Vulnerabilities
NVIDIA said that it would patch a driver exploit disclosed by a researcher on Christmas Day, which allows an attacker to gain super-user access...
Vulnerabilities
On Wednesday, an SQL Injection vulnerability was disclosed that impacts all versions of the Ruby on Rails (a.k.a. Rails) platform. However, despite the fact...
Vulnerabilities
Adobe Systems is planning to release an update coinciding with Microsoft Patch Tuesday to fix critical vulnerabilities affecting Adobe Reader and Acrobat.
Privacy
SAN FRANCISCO - Facebook sidestepped a privacy gaffe on Monday by fixing a flaw that made it possible to snoop on private New Year's...
Malware & Threats
Microsoft has issued a security advisory, and confirmed reports that a zero-day vulnerability in Internet Explorer has been used in targeted attacks. One such...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)