Vulnerabilities
Virtual Patching Takes the Pain out of Defending against SQL injection Attacks Like LizaMoon
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Vulnerabilities
Back in July 2010 at the Black Hat conference in Las Vegas, Microsoft announced that it would move to a new vulnerability disclosure process...
Vulnerabilities
As expected, Oracle has issued a critical patch update containing 73 new security vulnerability fixes across hundreds of its products. Oracle also warns that...
Security Architecture
Veracode Report Uncovers Significant Weaknesses in Security Vendor Applications. Shows Slight Decline in the Percentage of SQL Injection Errors Across All Industry Applications, While...
Incident Response
Many Voice Concern Over Database Giant’s Response to High Risk Vulnerabilities(Update 4/19 - Oracle Released The Critical Patch Update as Expected)
Vulnerabilities
Oracle has issued a critical patch update pre-release announcement saying that on Tuesday, April 19, 2011 the database giant will release will release a...
Vulnerabilities
Apple released several security updates this week, addressing a number of vulnerabilities across its products ranging from Mac OS X to its Safari Web...
Network Security
Rapid7 and Sourcefire today announced a product integration which enables Sourcefire’s 3D System to integrate active vulnerability data from Rapid7’s active scanning solution, NeXpose...
Vulnerabilities
Aggressive initiatives by the makers of popular Web browsers including Google, Microsoft, and Mozilla to improve the security of their Web browsers appear to...
Application Security
NEI, a Canton, Massachusetts provider of solutions for software technology developers and OEMs, today announced that it has been awarded a US Patent for...
Vulnerabilities
Chicago based Trustwave, a provider of security and compliance solutions, today released a tool that provides its enterprise clients the ability to manage all...
Management & Strategy
Compliance Requirements, Legal Ramifications, and other Drivers with Real World Risks and Consequences are Often the Best way to Bend the Ear of a...
Vulnerabilities
WhiteHat Security, a Santa Clara, California based provider of Web site risk management solutions, today released its most recent Web site Security Statistics Report....
Vulnerabilities
The Internet Systems Consortium (ISC) and US-CERT have issued a high severity vulnerability warning, discovered by Neustar, which affects BIND, the most widely used...
Vulnerabilities
Rapid7, a Boston-based provider of vulnerability management and penetration testing solutions, today announced that its NeXpose product now provides full Adobe® Flash decompilation and...
Vulnerabilities
Network security and unified threat management (UTM) solutions provider, Fortinet, in its January 2011 Threat Landscape report, revealed a 61 percent exploitation rate of...
Malware & Threats
Boston based Core Security Technologies, a provider of IT security test and measurement software solutions, today issued an advisory disclosing stack overflow vulnerabilities affecting...
Vulnerabilities
BeyondTrust, a provider of privilege delegation and authorization management solutions, has joined forces with IT security risk and compliance solutions provider, Qualys, on a...
Malware & Threats
Internet TVs - The Latest Attack Vector: Researchers Hack Internet Enabled TVs, Discover Multiple Security Vulnerabilities
Application Security
As the year comes to a close, we thought it would be appropriate to highlight some of the best stories and columns for 2010....
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)