Vulnerabilities
Mac OS X users should run Software Update to check whether the latest Java update fixing several security flaws is available. Even though the...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Vulnerabilities
Microsoft is planning a relatively quiet release for Patch Tuesday with just a pair of security updates in tow next week.
Cloud Security
Researchers may have figured out a way to break out of a virtual machine and take over the underlying host.
Vulnerabilities
Lately, there has been a lot of commotion around Java vulnerabilities. Late last month, security researchers discovered zero-day java vulnerabilities being actively exploited in...
Vulnerabilities
Hours after Oracle patched vulnerabilities in Java with an emergency out-of-band update, researchers managed to uncover another security flaw that would give attackers complete...
Vulnerabilities
Adobe has released a security update for Adobe Photoshop CS6 (13.0) for Windows and Mac OS X to address two security vulnerabilities that, if...
Vulnerabilities
On Thursday, Oracle released a rare out-of-cycle patch to address recently disclosed flaws in Java 7 that put Internet users around the world at...
Vulnerabilities
Secunia announced the availability of the latest version of its Corporate Software Inspector product with new features to support additional operating platforms.
Vulnerabilities
According to IDG News, who spoke to Adam Gowdiak, the founder and CEO of Polish security firm Security Explorations, Oracle was told about the...
Cybercrime
The zero-day in Java that SecurityWeek reported on Monday has gotten worse, as it can be targeted from within the Blackhole Exploit Kit and...
Vulnerabilities
A new survey from security information and event management vendor Sensage underscores the challenges surrounding security measurements are starting to mount.
Malware & Threats
Security researchers from FireEye have discovered a new zero-day Java vulnerability that is being targeted in the wild. According to FireEye researcher Atif Mushtaq, the...
Network Security
A Vulnerability Management (VM) program is commonly defined as the “cyclical practice of identifying, classifying, remediating, and mitigating vulnerabilities" . According to Gartner’s report...
Malware & Threats
Researchers have identified targeted attacks exploiting the Flash Player bug Adobe patched just last week.
Vulnerabilities
The Apache Software Foundation has fixed over fifty bugs, including two security vulnerabilities, in its venerable Web server software.
Vulnerabilities
The Department of Homeland Security has warned that encrypted traffic sent to and from RuggedCom network products can be decrypted by malicious attackers.
Vulnerabilities
Adobe on Tuesday released updates that address multiple security vulnerabilities across various versions of Adobe Flash Player running on Windows, Macintosh, Linux, and Android.
Vulnerabilities
Apple patched a vulnerability in its remote desktop product where the connection isn't being encrypted correctly. This may result in information disclosure, Apple said...
Vulnerabilities
In response to the code required to crack MS-CHAPv2 sessions being published to the Web, Microsoft has issued a security advisory for organizations that...
Mobile & Wireless
San Francisco, California-based NCC Group today said that has acquired Intrepidus Group, a security research and testing services provider focused on the mobile sector....
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)