Compliance
While There are Numerous Options on How to Protect Mobile Payments, Attaining Impermeable Protection is Non-Negotiable.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Cyberwarfare
OTTAWA - Canada said Tuesday it had invoked a "national security exception" that could exclude China's Huawei Technologies from a role in helping build...
Endpoint Security
Microsoft has patched a critical vulnerability in Microsoft Word in today's Patch Tuesday.
Network Security
BeyondTrust has released a new version of its free “Community Edition” Retina vulnerability assessment tool. With Retina Community, enterprises can perform on-the-fly assessments without...
Vulnerabilities
Microsoft is prepping seven security bulletins for next week's Patch Tuesday, as well as moving forward with plans to make an update restricting the...
Cybercrime
As I wander the world of website security, I run across many reasons why most websites (over 70%) are open to hacks from amateur...
Mobile & Wireless
The security vulnerability that could fully wipe Samsung Galaxy S III device appears to not be limited to just Samsung devices after all, but...
Cybercrime
On Tuesday, SourceForge and the phpMyAdmin project reported that one of their mirrors was serving a compromised version of the MySQL management application. The...
Vulnerabilities
Researchers from Security Explorations, the group who pointed out that the recently released patch to address a previous vulnerability in Java was easily bypassed,...
Vulnerabilities
Security researchers have found a way to use an Android device to game certain types of cards used to pay for rides on transit...
Mobile & Wireless
During the EUSecWest security conference last week in Amsterdam, researchers taking part in the Pwn2Own Mobile contest showed off a new attack vector in...
Vulnerabilities
As promised, Microsoft has patched Internet Explorer against the recently disclosed Zero-Day that made headlines all week. In addition, they patched four other flaws that...
Data Protection
A security researcher from Application Security, Inc. (AppSec) has discovered a flaw in Oracle’s software that would allow an attacker to crack database passwords...
Vulnerabilities
New Tool Checks To See If MySQL Servers Are At Risk From The MySQL CVE-2012-2122 Vulnerability
Security Infrastructure
Attackers can remotely login to a control system used by electric utilities and oil and gas companies via a backdoor to gain administrative access,...
Vulnerabilities
On Wednesday, Microsoft released a FixIt tool for those wanting some automated protection from the latest Zero-Day for Internet Explorer. However, if users at...
Application Security
Veracode Launches Vendor Application Security Testing ProgramApplication security testing firm Veracode on Wednesday launched an automated program to help businesses evaluate security risks associated with...
Cybercrime
According to research from security firm AlienVault, there appears to be a connection between the "PlugX" gang out of China and the latest Internet...
Vulnerabilities
In response to reports of a Zero-Day vulnerability targeting all versions of Internet Explorer, with the single exception of Internet Explorer 10, Microsoft has...
Vulnerabilities
New Features Niagara Framework 3.7 include Enhanced Security and Built-in Mobile Support Today, Tridium, the Honeywell subsidiary that makes the Niagara Framework, pushed a...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)