Vulnerabilities
Microsoft is prepping nine security bulletins to patch 21 vulnerabilities next week as part of Patch Tuesday.This month’s update features fixes for Microsoft Windows,...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Cybercrime
Symantec confirmed with SecurityWeek today, that following claims from Anonymous that additional Symantec product source code would be released, the claims are true, and...
Vulnerabilities
Clickjacking, a term coined by Jeremiah Grossman in 2008, is quickly becoming an extremely dangerous threat. Recent news coverage of enormous clickjacking schemes are...
Vulnerabilities
Attackers Target Patched Windows Media Player Vulnerability Attackers are going after a recently patched vulnerability in Windows Media Player (WMP), and users do not seem...
Vulnerabilities
Symantec has found itself in the unusual position of having to warn users about its own software.
Cybercrime
Security vendor McAfee issued a patch on Thursday to address a problem impacting its SaaS Total Protection service, including a bug that allows attackers to turn a...
Vulnerabilities
Klocwork, a company known for its Insight software that performs source code analysis on-the-fly, has released a new version of its flagship product that...
Data Protection
On Tuesday, Oracle delivered its first Critical Patch Update (CPU) of 2012, which included a total of 78 fixes across a wide range of...
Vulnerabilities
In a talk at the 28th Chaos Communication Congress (28C3) entitled “Smart Hacking For Privacy,” researchers Dario Carluccio and Stephan Brinkhaus described their experiences...
Vulnerabilities
Microsoft and Adobe Systems released a bevy of patches today to plug security holes in their products.Only one of the month’s seven Microsoft Patch...
Vulnerabilities
Microsoft is starting the 2012 Patch Tuesday cycle off with a bang.According to Microsoft’s advanced notification, the January security update will include seven bulletins...
Vulnerabilities
In a rare move, Microsoft is breaking its normal procedures and will issue an emergency out-of-band security update on Thursday to address a recently...
Network Security
Several vendors are currently working to resolve a hash collision vulnerability, which if exploited can trigger a denial-of-service condition on multiple platforms.
ICS/OT
Siemens has announced plans to patch a number of critical vulnerabilities in its SCADA software after a researcher accused the company of trying to...
Vulnerabilities
In late November, news surfaced that researchers from Columbia University had discovered vulnerabilities in upgradeable firmware in HP laser printers that could be compromised...
Vulnerabilities
A report is circulating about a new Windows 7 bug that could be leveraged by attackers to run malicious code.
Vulnerabilities
Adobe Systems plans to release a patch Friday to close an Adobe Reader and Acrobat security hole at the center of an attack campaign...
Vulnerabilities
As part of their scheduled patch cycles, Microsoft and Adobe Systems today released patches aimed at securing users.Microsoft released 13 security bulletins today for Patch...
Vulnerabilities
Sometime around the beginning of November, thieves managed to insert an additional circuit board into the self checkout Point of Sale (POS) machines Lucky’s...
Vulnerabilities
NT OBJECTives, an application security vendor based in Irvine, California, has released a new tool that not only scans for SQL Injection vulnerabilities, but...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)