Network Security
Integration with QualysGuard Allows Sourcefire to Adapt Protection to Known Vulnerabilities on a Customer’s Network Sourcefire and Qualys today announced a product collaboration in...
Hi, what are you looking for?
SecurityWeek
Artificial Intelligence
Three vulnerabilities in Salesforce Agentforce allowed hackers to hijack trusted agents, steal data, and launch phishing attacks.
Email Security
Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication.
Vulnerabilities
The vulnerabilities, tracked as CVE-2026-28324 and CVE-2026-28325, can be exploited without authentication.
Vulnerabilities
Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code.
Malware & Threats
.LNK Exploits - Shortcuts to InsecurityThe vulnerability in Windows Shell’s parsing of .LNK (shortcut) files presents some interesting and novel features in terms of...
Malware & Threats
In 2010, 25 percent of new worms have been specifically designed to spread through USB storage devices when connected to computers.These types of threats...
Application Security
IBM released its X-Force 2010 Mid-Year Trend and Risk Report today, which showed record threat levels in almost every area.
Funding/M&A
HP to Acquire Fortify SoftwareHP (NYSE:HPQ) announced today that it has signed a definitive agreement to acquire Fortify Software, a privately held software security...
Mobile & Wireless
Foxit Reader Updated to Address Security Issues Caused by iPhone & iPad Jailbreak ProgramFoxit has released Foxit Reader 4.1.1.0805 to address a vulnerability associated...
Vulnerabilities
Fat Tuesday – Microsoft’s Patch Tuesday to Include 14 Security Bulletins Covering 34 Vulnerabilities
Microsoft has released the advanced notification for its upcoming Patch Tuesday security update release, in which the company will be issuing 14 security bulletins...
Network Security
Cisco Security Advisory - Firewall Services ModuleCisco has released a security advisory that deals with certain vulnerabilities found in its Cisco Firewall Services Module...
Vulnerabilities
Security solutions provider Rapid7 has launched the latest version of its vulnerability management solution, NeXpose, which will help local governments and private enterprises adhere...
Black Hat
Samy Kamkar, in an incredibly interesting session at Black Hat titled “How I Met Your Girlfriend,” highlighted new types attacks executed from the Web.
Vulnerabilities
Microsoft this week announced an agreement to collaborate with Adobe systems and facilitate advanced information sharing on vulnerabilities via its Microsoft Active Protections Program...
Black Hat
The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009 but the talk was pulled at the last...
Black Hat
The presentation "Jackpotting Automated Teller Machines" was originally on the schedule at Black Hat USA 2009 but the talk was pulled at the last...
Application Security
Today at Black Hat USA 2010 in Las Vegas, Qualys will unveil an open source web application fingerprinting engine that identifies application and plugin...
Black Hat
Sourcefire Razorback - Open Source Framework Ties Together Various Threat Collection and Detection TechnologiesSourcefire, Inc. (Nasdaq:FIRE), a provider cybersecurity solutions, this week is launching Razorback,...
Vulnerabilities
Qualys today announced that its QualysGuard Vulnerability Management (VM) now includes correlated exploitability information from real-time feeds to provide customers with up-to-date references to...
Application Security
Fifty-six percent of companies that have deployed interactive Web 2.0 applications have taken steps to prevent hacking, and the other 46 percent should, according...
Application Security
Core Security, maker of penetration testers used by “red teams” to identify security vulnerabilities, today announced beta availability of a fully automated testing solution...
Application Security
Enterprise Website Vulnerability Management Product Updated With Enhanced User and Role Management, New Reporting Capabilities and Stronger Access Control
Data Protection
IT security risk and compliance management solutions provider, Qualys, today added a new feature to its QualysGuard Vulnerability Management solution to help customers identify...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk.
(Nadir Izrael)
Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today.
(Sravish Sridhar)
Every leaked credential should be dead, or dying, within sixty seconds of being found. Here's a proposal to make that the default.
(Matt Honea)
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)