Vulnerabilities
WASHINGTON - New Jersey's decision to allow voters displaced by superstorm Sandy to cast ballots by email has prompted a flood of warnings over...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
WASHINGTON - Few want to even think about it, but the 2012 US election result could be clouded by problems with voting machines ......
Vulnerabilities
Researchers at VUPEN Security say they have uncovered multiple vulnerabilities in Windows and Internet Explorer 10 that can be combined to bypass security features...
Vulnerabilities
Secunia, a Copenhagen, Denmark-based provider of vulnerability management solutions, has updated its vulnerability management platform to proactively alert organizations of software vulnerabilities so they...
Email Security
DKIM, or DomainKeys Identified Mail, is a protocol created to allow mail services to verify the authenticity of the mail messages they deliver.
Vulnerabilities
On Friday, Mozilla issued another security fix for issues discovered after the release of Firefox 16.0.1, which if exploited, would allow Cross-Site Scripting (XSS)...
Vulnerabilities
I don’t play poker well. I donate money to my friends every few weeks because I like to eat junk food, breathe bad cigar...
Vulnerabilities
After enterprise software firm Sybase released patches to address critical vulnerabilities in its relational database management system over the summer, it turned out the...
Application Security
Researchers Find Nine Application Technologies Overlooked By Most Web Application Scanners
Vulnerabilities
Cloud-based security and compliance solutions provider Qualys has updated two of its products to help administrators better manage vulnerabilities and mitigation, the company said Wednesday...
Vulnerabilities
Adobe has released security updates addressing critical vulnerabilities in Adobe Shockwave Player as part of its regularly scheduled update.
Vulnerabilities
Report Shows Notable Increase in Cross-Site Attacks In Q3 2012FireHost, a Dallas, Texas-based secure cloud hosting company, today revealed the findings of its latest...
Application Security
Researchers from two universities in Germany have published a paper on the state of SSL within several Android applications, and the findings were far...
Endpoint Security
Adobe Systems beefed up the security capabilities of its Reader and Acrobat software with a more robust sandbox and new security mitigation features.
Vulnerabilities
Last week, Mozilla removed the latest version of their Firefox Web browser just a day after it was released. The reason? A security vulnerability...
Cybercrime
Last week, Microsoft released the latest Microsoft Security Intelligence Report (SIR), which provided some interesting empirical insight into malware and how it is distributed on...
Vulnerabilities
Oracle is planning a massive security update for Tuesday with fixes for more than 100 vulnerabilities impacting the company's products.
Vulnerabilities
During Google’s Pwnium competition at the Hack in the Box conference in Kuala Lumpur, Malaysia this week, a clever teenage hacker leveraged two bugs...
Vulnerabilities
Microsoft Patched XSS Flaw After Google Security Researchers Found It Within HotmailThe HTML sanitization flaw patched by Microsoft in this month's Patch Tuesday appears...
Vulnerabilities
Mozilla has removed the latest version of their FireFox Web browser just over a day after it was released, due to a vulnerability that...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)