Vulnerabilities
Peter Winter-Smith, a researcher from the U.K., published an interesting exploit for the NVIDIA Display Driver Service on Christmas Day, which enables an attacker...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Just a week after issuing a patch to address a critical directory traversal vulnerability (CVE-2012-5978) in its View server products, VMware on Thursday issued...
Security Infrastructure
The European Union's cyber-security agency outlined the challenges of protecting European power grids and released a framework to establish baseline standards to secure smart...
Mobile & Wireless
Earlier this week, SecurityWeek reported on the discovery of a new vulnerability in Exynos 4-powered devices from Samsung, including the Samsung Galaxy S2 and...
Vulnerabilities
Earlier this month Ang Cui, a fifth-year graduate student from the Columbia University Intrusion Detection Systems Lab, demonstrated a series of vulnerabilities while presenting...
Vulnerabilities
Attackers could exploit three Adobe Shockwave flaws to remotely execute code on vulnerable systems, according to three advisories published by US-CERT this week.
Vulnerabilities
Oracle has moved to enhance security in an updated version of the Java Development Kit.
Vulnerabilities
Microsoft fired back at a report of an attack that allows people to track the position of a user's mouse cursor. The situation was...
Vulnerabilities
VMware on Thursday fixed a critical directory traversal vulnerability (CVE-2012-5978) in its View server products, which if exploited, could enable a remote attacker to...
Cybercrime
Exploit Hub, an exploit marketplace orginally launched by NSS Labs in 2010, but spun off by the testing firm in March of this year,...
Vulnerabilities
Adobe has released new security bulletins for ColdFusion and Flash Player as part of its scheduled update.
Vulnerabilities
Microsoft is planning to release seven security bulletins to close out the year. Five of the bulletins are rated 'Critical', while the other two...
Vulnerabilities
SSH Communications Security has released a patch addressing a serious vulnerability in its commercial SSH server, a day after a researcher publicly disclosed the...
Network Security
Tenable Network Security announced upgrades to its unified security monitoring platform, SecurityCenter, on Tuesday. The most significant update to the product is added support...
Vulnerabilities
Western Connecticut State University on Thursday said that a database vulnerability on a system housing sensitive personal information resulted in approximately 235,000 individuals being...
Vulnerabilities
On Tuesday, for unknown reasons at the time, Google suddenly started re-verifying people to previous levels of access. As it turns out, the reason...
Vulnerabilities
Printers manufactured by Samsung, and sold via Dell or direct channels, are vulnerable to attack thanks to a hard-coded administrator account in the device’s...
Vulnerabilities
An exploit for a Java zero-day is on sale for "five digits" in an underground forum, according to a recent report.
Email Security
On Friday, reporter Brian Krebs published a report on a different kind of post-holiday sale, one where a seller is looking to make a...
Cybercrime
On Saturday, hundreds of Pakistani portals and Web sites for some major organizations were by all appearance compromised, and defaced. However, as it turns...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)