Vulnerabilities
Adobe on Tuesday released updates that address multiple security vulnerabilities across various versions of Adobe Flash Player running on Windows, Macintosh, Linux, and Android.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Vulnerabilities
Apple patched a vulnerability in its remote desktop product where the connection isn't being encrypted correctly. This may result in information disclosure, Apple said...
Vulnerabilities
In response to the code required to crack MS-CHAPv2 sessions being published to the Web, Microsoft has issued a security advisory for organizations that...
Mobile & Wireless
San Francisco, California-based NCC Group today said that has acquired Intrepidus Group, a security research and testing services provider focused on the mobile sector....
Mobile & Wireless
Apple has responded to a French iOS hacker’s discovery of a spoofing problem within iOS’ implementation of SMS. If abused, there is a serious...
Vulnerabilities
Oracle Releases Java SE 7 Update 6 – Boosting Its Support for Mac OS X in the Process Oracle this week released the latest...
Vulnerabilities
Google is upping the rewards for its Pwnium contest in a bid to attract more research from security experts.
Vulnerabilities
At the 3rd Usenix Workshop of Health Security and Privacy in Bellevue, Washington, last week, researchers focused their attention on medical devices, and not...
Vulnerabilities
Adobe rolled out a set of patches on Tuesday, addressing more than 20 security issues. The patch that is being hailed as the most...
Vulnerabilities
Microsoft released nine security bulletins today addressing 26 vulnerabilities in its products. Five of the bulletins are rated 'critical', and cover issues in Windows,...
Vulnerabilities
Oracle has released a patch for a vulnerability (CVE-2012-3132) disclosed by David Litchfield from Accuvant Labs during the Black Hat security conference last month....
Malware & Threats
The malware responsible for attacks on at least 30 local governments, universities, and businesses in the Netherlands, Dorifel (XDocCrypt), is still actively spreading and...
Audits
Project leverages popular search engines to identify vulnerable systems and sensitive data in corporate networks.Information is the key; hackers on both side of the...
Vulnerabilities
August 2012 Patch Tuesday Fixes To Include Patches for Internet Explorer and WindowsMicrosoft is planning to release nine security bulletins next week as part...
Vulnerabilities
Adobe will be patching critical vulnerabilities in its Adobe Reader and Acrobat software as part of its scheduled quarterly update next week.
Black Hat
HONG KONG - (AFP) - Chinese communications giant Huawei Technologies on Wednesday responded to US hackers' claims that its routers were easily cracked, saying...
Network Security
In a talk on router hacking during Def Con on Sunday, Recurity Labs’ Felix (FX) Lindner told those in attendance that for the 20th...
Black Hat
HTML5 Top 10 Security Threats, Stealth Attacks and Silent Exploits
Vulnerabilities
Researcher Andrei Costin discusses the security challenges facing ADS-B technology and how attackers can spoof air traffic signals.The skies may not be as friendly...
Network Security
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)