Vulnerabilities
The Vulnerability Discovery Team at Carnegie Mellon University’s Software Engineering Institute CERT Program has released two new software testing tools designed to help developers...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
ICS/OT
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Data Protection
Oracle users should apply a workaround in lieu of a patch for a critical vulnerability revealed in a bug disclosure flap, security experts say.
Network Security
Symantec Threat Report Reveals 81 Percent Increase in Malicious Attacks, Drop In Number of VulnerabilitiesIn its latest threat report released on Monday, Symantec revealed...
Vulnerabilities
Oracle recently patched a flaw in the TNS Listener service as part of their update release in April. As it turns out, the TNS...
Vulnerabilities
Microsoft has patched a recently disclosed password reset vulnerability in Hotmail, which exposed a user base of some 360 million people to having their...
Vulnerabilities
After celebrating the one-year mark for its Web bug bounty program back in February of this year, along with the announcement that, at the...
Vulnerabilities
On Tuesday, Adobe released a security bulletin to address multiple vulnerabilities in Adobe Reader X (10.1.2) and earlier versions for Windows and Macintosh, Adobe...
Vulnerabilities
Microsoft patched 11 security vulnerabilities today, including a critical bug being targeted by attackers. Microsoft released a total of six security bulletins, including four...
Security Architecture
A new survey of 104 security professionals in the energy sector gave a big thumbs down to smart meter security.
Network Security
Microsoft is prepping six security bulletins to cover 11 vulnerabilities as part of this month’s Patch Tuesday.
Mobile & Wireless
Findings from a recent study conducted by Tenable Network Security during the RSA Conference earlier this year, show that mobile device vulnerability management is...
Malware & Threats
Organizations should move to patch a Java vulnerability being targeted by attackers in the wild, security experts say.
Vulnerabilities
An analysis of a widely-used repository for open source components revealed that Global 500 organizations collectively downloaded more than 2.8 million insecure components in...
Network Security
Microsoft made lots of news recently with the disclosure that a key vulnerability (MS12-020) involving the RDP protocol had been leaked, apparently from Microsoft’s...
Cloud Security
eEye Digital Security released a new piece of freeware today for checking system configurations in the name of security.The tool was released on the...
Management & Strategy
Attackers are adapting their techniques as software vendors get better at patching vulnerabilities, according to a new report from IBM. In its X-Force 2011...
Application Security
A new survey of developers and security professionals revealed that many organizations are still not baking security into the application development process.According to research...
Network Security
It has been close to four years since the birth of the Microsoft Active Protections Program (MAPP). The program is meant to give security...
Vulnerabilities
According to data collected by security researcher Dan Kaminsky, the recently disclosed RDP vulnerability in Windows has a potential attack surface equal to millions...
Vulnerabilities
Microsoft is urging organizations to apply the sole critical update in this month’s Patch Tuesday release as soon as possible.The critical bulletin – one...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)