Cybercrime
The latest Java vulnerability has been integrated into both Black Hole and Gong Da exploit kits, making it easier for cyber-criminals to launch attacks...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Mozilla has released the latest version of its Firefox Web browser, which addresses a massive batch of 2,365 bugs. In addition to general usability...
Malware & Threats
A security researcher has developed a proof-of-concept malware capable of remotely accessing smart card readers on Windows machines.
Cybercrime
Two machines in the FreeBSD.org cluster were compromised in a cyber attack, prompting officials with the open source project to issue a warning to...
Vulnerabilities
Adobe today continued its wave of security updates with a newly released security update for Adobe ColdFusion 10. The hotfix fixes a vulnerability affecting...
Vulnerabilities
Virtualization giant VMware released a security update last week to address a denial of service (DoS) vulnerability in ESX and ESXi, along with and...
Vulnerabilities
Study Finds That While Application Security Testing Is Expanding to New Industries, The Software Supply Chain Is Still Vulnerable
Cybersecurity Funding
Risk I/O, a vulnerability intelligence platform, announced on Tuesday that it has secured $5.25 million in Series A funding. The money was raised from...
Vulnerabilities
Microsoft is prepping fixes for 19 security vulnerabilities for this month's Patch Tuesday. The vulnerabilities are stretched out across six bulletins, four of which...
Vulnerabilities
Researchers at Group-IB have discovered a new vulnerability in Adobe Reader that is being sold on criminal forums. The moderate price, $30,000 - $50,000,...
Vulnerabilities
SAN FRANCISCO - Some people logging onto Twitter on Thursday were greeted with word that their passwords were reset due to concerns their accounts...
Email Security
After several major organizations were found to be using shorter-than-recommended encryption keys to authenticate their messages, an industry group recommended organizations replace keys immediately.
Vulnerabilities
Cenzic, known for its Web Application Security intelligence offerings, and CORE Security, a company that offers predictive security intelligence solutions, have teamed up in...
Cloud Security
After an attacker recently leaked the source code for VMware's ESX Server online, VMware downplayed the significance of the breach, saying the stolen code...
Vulnerabilities
On Tuesday, Adobe issued updates to Flash Player for Windows, Mac, and Linux in order to address seven recently identified security vulnerabilities. According to...
Cybercrime
A group of activist hackers calling themselves NullCrew have targeted the UK’s Ministry of Defence (MOD), and used a simple SQL Injection attack to...
Vulnerabilities
WASHINGTON - New Jersey's decision to allow voters displaced by superstorm Sandy to cast ballots by email has prompted a flood of warnings over...
Vulnerabilities
WASHINGTON - Few want to even think about it, but the 2012 US election result could be clouded by problems with voting machines ......
Vulnerabilities
Researchers at VUPEN Security say they have uncovered multiple vulnerabilities in Windows and Internet Explorer 10 that can be combined to bypass security features...
Vulnerabilities
Secunia, a Copenhagen, Denmark-based provider of vulnerability management solutions, has updated its vulnerability management platform to proactively alert organizations of software vulnerabilities so they...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)