Mobile & Wireless
Findings from a recent study conducted by Tenable Network Security during the RSA Conference earlier this year, show that mobile device vulnerability management is...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Malware & Threats
Organizations should move to patch a Java vulnerability being targeted by attackers in the wild, security experts say.
Vulnerabilities
An analysis of a widely-used repository for open source components revealed that Global 500 organizations collectively downloaded more than 2.8 million insecure components in...
Network Security
Microsoft made lots of news recently with the disclosure that a key vulnerability (MS12-020) involving the RDP protocol had been leaked, apparently from Microsoft’s...
Cloud Security
eEye Digital Security released a new piece of freeware today for checking system configurations in the name of security.The tool was released on the...
Management & Strategy
Attackers are adapting their techniques as software vendors get better at patching vulnerabilities, according to a new report from IBM. In its X-Force 2011...
Application Security
A new survey of developers and security professionals revealed that many organizations are still not baking security into the application development process.According to research...
Network Security
It has been close to four years since the birth of the Microsoft Active Protections Program (MAPP). The program is meant to give security...
Vulnerabilities
According to data collected by security researcher Dan Kaminsky, the recently disclosed RDP vulnerability in Windows has a potential attack surface equal to millions...
Vulnerabilities
Microsoft is urging organizations to apply the sole critical update in this month’s Patch Tuesday release as soon as possible.The critical bulletin – one...
Vulnerabilities
Apple Criticized Once Again for Its Silience and Uncooperative Ways When It Comes to Fixing Vulnerabilities in its Products
Vulnerabilities
Microsoft has a relatively quiet Patch Tuesday planned for this month, with just six bulletins on the way for next week.
Vulnerabilities
Ford Testing Firmware Update Program, Encourages Customers to Have a Unique USB for Each Ford They OwnThis month, Ford is borrowing something from the...
Vulnerabilities
Google showed a great deal of confidence ahead of the CanSecWest conference this year when it announced plans to offer up to $1 million...
ICS/OT
McAfee has published a paper detailing an attack on the Apple iPad to highlight the challenges facing mobile device security.
ICS/OT
SAN FRANCISCO – RSA CONFERENCE 2012 – Organizations with large and disparate IT systems are often challenged in dealing with vulnerability management initiatives and...
Security Infrastructure
The security of device-independent quantum key distribution (QKD) has been deemed ineffective by a team of Canadian researchers, and at least one commercial product...
Vulnerabilities
Microsoft’s Patch Tuesday is a monthly news event. But new research from Secunia shows that focusing on patching Microsoft vulnerabilities can create a dangerous...
Vulnerabilities
Microsoft released fixes for 21 security vulnerabilities as part of this month’s Patch Tuesday.The vulnerabilities are covered in nine separate bulletins, including four that...
Vulnerabilities
Google has passed the one-year mark for its Web bug bounty program, including the announcement that they have paid out more than $400,000 in...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)