Security Infrastructure
The Department of Homeland Security, through its Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), issued a warning last Friday about security vulnerabilities in...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The authentication bypass allows attackers to execute arbitrary code as admin and take over XCP-ng nodes.
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
Privacy
Skype has said they are aware of, and will patch, an odd bug that created a privacy issue by sending instant messages to a...
Vulnerabilities
Windows XP users running Symantec Endpoint Protection (SEP), the company’s enterprise endpoint antivirus solution, may have been greeted with a nasty surprise this week: the...
Vulnerabilities
Database giant Oracle on Thursday issued its pre-release announcement for its July 2012 Critical Patch Update, saying it would issue 88 new security vulnerability...
Vulnerabilities
nCircle, a provider of information risk and security solutions, today announced PureCloud™ Enterprise, a new scanning solution designed to help enterprises address the common...
Vulnerabilities
Using technology to steal high-tech cars is not new. In my book, When Gadgets Betray Us, I use the example of Radko Soucek, a...
Vulnerabilities
Microsoft has issued a security advisory, and encouraged users of Windows Vista and Windows 7 to disable the Windows Sidebar and associated gadgets. The...
Mobile & Wireless
Instagram "Friendship" Vulnerability Exposed Users' Private Photos and Profile InformationSpanish researcher Sebastián Guerrero published an advisory on Wednesday, detailing what he called a ‘friendship’...
Risk Management
How Browser Sync Features Can Pose a Risk to The Enterprise
Vulnerabilities
Plesk, a popular Web hosting control panel – second to cPanel in the hosting market – was recently updated in order to address Remote...
Vulnerabilities
The Google Chrome team has moved the Flash plugin into a separate sandbox on all versions of Windows to make it harder for attackers...
Vulnerabilities
Microsoft plugged a pair of vulnerabilities in Internet Explorer 9 today as part of a sizeable Patch Tuesday update.
Vulnerabilities
Network security firm Cyberoam has released an update for all of its unified threat management (UTM) devices in response to the leak of the...
Cybercrime
According to research from Symantec and Sophos, the Blackhole exploit kit has been upgraded with some new features recently. The latest revision includes a...
Vulnerabilities
Researchers at the University of Texas at Austin have demonstrated how the GPS signals of an unmanned aerial vehicle (UAV), or drone, can be...
Application Security
Web Application Security gurus, WhiteHat Security, released a report this week that examines the severity and duration of Web application security related vulnerabilities discovered...
Vulnerabilities
Secunia, a provider vulnerability management solutions, on Thursday launched Secunia Personal Software Inspector 3.0, a free scanner that identifies software applications that may be insecure...
Black Hat
HTML5 brings with it the promise of increased functionality. More functionality however, as usual, comes with a price – an increased attack surface.
Vulnerabilities
Cisco Addresses Code execution and DoS Vulnerabilities Cisco has issued three security advisories that address vulnerabilities within Cisco ASA and ASASM, their AnyConnect Secure...
Vulnerabilities
Michael Barrett, PayPal's CISO, was initially against the idea of paying people who reported security problems properly. However, after seeing the success of the...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)