Application Security
Last week at the Black Hat Conference in Las Vegas, SaaS-based IT security solution provider Qualys, made several announcements including a new QualysGuard Consultant...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Management & Strategy
Microsoft released 13 security bulletins today as part of Patch Tuesday, including two rated “critical” – its highest security rating. But according to some...
Black Hat
Vulnerabilities
Microsoft today announced “BlueHat Prize,” a contest designed to generate new ideas for defensive approaches to support computer security. Microsoft’ goals is to inspire...
Endpoint Security
The specter of advanced persistent threats (APTs) hangs over a growing number of conversations these days about enterprise security, and has prompted businesses to...
Security Infrastructure
Data security firm Imperva, today released the results of study which revealed that web applications are probed or attacked about 27 times per hour...
Vulnerabilities
Foxit Corporation, maker of popular the PDF reader, has patched Foxit Reader 5.0.2 to address a security vulnerability and other bugs.
Vulnerabilities
RIM this week released a security advisory to address a vulnerability in the BlackBerry Administration API included in the BlackBerry Enterprise Server that may...
Vulnerabilities
Add mice and keyboards to the list of UBS-based peripherals now suspect in any corporate environment. In recent weeks several gadget blogs have been...
Vulnerabilities
Related Resource: The Top 10 Reports for Managing Vulnerabilities
Network Security
NeXpose 2011 Summer Release Brings Increased Deployment Flexibility, Enhanced Integration, Scalability and Improved Administrative CapabilitiesRapid7, a Boston-based provider of vulnerability management and penetration testing solutions,...
Vulnerabilities
In a talk at last year’s EuroSecWest conference, researcher Andrei Costin presented several vulnerabilities he found within commercial printers.
Application Security
Are You using the Right Application Assessment Tools in the Right Place at the Right Time?
Vulnerabilities
Skype allows customers to communicate over Voice over Internet Protocol (VoIP) platforms. And because it is encrypted, Skype, which was recently purchased by Microsoft...
Vulnerabilities
In a pre-release Announcement, Oracle said that its June Critical Patch Update (CPU), which will be released on Tuesday, June 7, 2011, will contain...
Cloud Security
At the Cloud Computing Expo taking place this week in New York City, Core Security Technologies launched a software-as-a-service (SaaS) based security testing solution...
Vulnerabilities
Microsoft has released a new version of its Enhanced Mitigation Experience Toolkit (EMET).
Vulnerabilities
A group of security and privacy researchers from the Institute of Media Informatics at Ulm University in Germany, is claiming to have discovered a...
Network Security
Back on April 12, 2011, a report from independent security testing organization NSS Labs, warned of a vulnerability affecting industry-leading firewalls, including a sneak...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)