Malware & Threats
Mozilla Mistakenly Posts File Containing Registered User Data, Including MD5 Hash Passwords, to Public Web Server
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Security Infrastructure
HP MSA2000 G3 “Backdoor” Vulnerability Discovered A hardcoded password-related security vulnerability has been discovered which apparently affects every HP MSA2000 G3 modular storage array shipped to date.
Application Security
Core Security Technologies, a Boston based provider of IT security testing and measurement solutions, today introduced the latest version of its automated penetration testing...
Cloud Security
New Endpoint Security Product Developers' Consortium to Improve Critical Class of Security ProductsICSA Labs, the vendor-neutral IT security testing and certification of division of...
Vulnerabilities
Researchers Discover Vulnerability in Canon's Original Data Security Kit, Allowing Manipulated Images to Pass as Authentic
Endpoint Security
Report Lists Top Applications With Security Vulnerabilities But Doesn't Provide a True Representation of Which are Really The Most DangerousA report released this week...
Vulnerabilities
Google has updated its Chrome Web browser to version 7.0.517.41 for Linux, Mac, and Windows platforms. The update addresses multiple vulnerabilities, including the potential...
Cloud Security
Cloud Service SLA Survival Tips - What should you be asking your cloud provider?So you’ve decided to test the waters of cloud computing, but...
Endpoint Security
Firesheep Extension for Firefox Enables HTTP Session Hijacking For the Masses. Instantly Hacks Into Facebook, Twitter, Hotmail and Many More Sites With Ease.
Malware & Threats
WhiteHat Security, a provider of website risk management solutions, unveiled its Threat Research Center (TRC) this week. The company has assembled a team of...
Cloud Security
Cloud Based Solution Helps Developers Reduce the Cost of Identifying and Fixing Software Defects
Application Security
Rapid7, a Boston, Massachusetts based provider of vulnerability management and penetration testing solutions, today announced the availability of Metasploit Pro, its new software targeted...
Endpoint Security
Adobe today announced its new Acrobat X Family of products, which includes Adobe Reader X as well as Acrobat X Suite, Acrobat X Pro,...
Mobile & Wireless
Vulnerability Could Allow Attacker to Execute Arbitrary Code or Cause a denial-of-service ConditionRIM has released a security advisory to address a security issue in...
Compliance
Qualys, a provider of on demand IT security risk and compliance management solutions, today announced that it is offering two-factor authentication to its QualysGuard customers...
Vulnerabilities
Vulnerabilities
Oracle Critical Patch Update for October, 2010 to fix 81 VulnerabilitiesOracle issued a Pre-Release Announcement this week, providing advance information about the Oracle Critical...
Application Security
While Bugs May No Longer Be Free, Exploits Really Want To Be
Funding/M&A
CSC today announced that it has acquired Vulnerability Research Labs (VRL), a privately held cyber threat intelligence firm based in Columbia, Maryland.
Malware & Threats
Qualys today announced the release of the second annual “Top Cyber Security Risks Report.” featuring new data from HP TippingPoint DVLabs, SANS Institute and...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)