Vulnerabilities
Microsoft is starting the 2012 Patch Tuesday cycle off with a bang.According to Microsoft’s advanced notification, the January security update will include seven bulletins...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
ICS/OT
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Vulnerabilities
In a rare move, Microsoft is breaking its normal procedures and will issue an emergency out-of-band security update on Thursday to address a recently...
Network Security
Several vendors are currently working to resolve a hash collision vulnerability, which if exploited can trigger a denial-of-service condition on multiple platforms.
ICS/OT
Siemens has announced plans to patch a number of critical vulnerabilities in its SCADA software after a researcher accused the company of trying to...
Vulnerabilities
In late November, news surfaced that researchers from Columbia University had discovered vulnerabilities in upgradeable firmware in HP laser printers that could be compromised...
Vulnerabilities
A report is circulating about a new Windows 7 bug that could be leveraged by attackers to run malicious code.
Vulnerabilities
Adobe Systems plans to release a patch Friday to close an Adobe Reader and Acrobat security hole at the center of an attack campaign...
Vulnerabilities
As part of their scheduled patch cycles, Microsoft and Adobe Systems today released patches aimed at securing users.Microsoft released 13 security bulletins today for Patch...
Vulnerabilities
Sometime around the beginning of November, thieves managed to insert an additional circuit board into the self checkout Point of Sale (POS) machines Lucky’s...
Vulnerabilities
NT OBJECTives, an application security vendor based in Irvine, California, has released a new tool that not only scans for SQL Injection vulnerabilities, but...
Network Security
Security researchers have uncovered more details about the recent Adobe Reader and Acrobat exploit that is being used in attacks targeting U.S. defense firms....
Vulnerabilities
Updated Story: Researchers Confirm Attackers Targeted Defense Firms with Adobe Reader Zero-day
Application Security
Software-as-a-Service (SaaS) security solutions vendor Qualys, today announced updates to its QualysGuard Web Application Scanning suite, including the ability to integrate with Selenium, the...
Vulnerabilities
Is the Potential of an Attacker Setting a Printer on Fire Really What IT Security Departments Should be Worried About?
Malware & Threats
The appearance of a new exploit has helped turn the spotlight this week on a common target of attackers – Java software.
Vulnerabilities
The Internet Software Consortium (ISC) has issued a fix for a bug in the BIND server software that has triggered crashes at organizations across...
Cybersecurity Funding
Boston-based Rapid7, a provider of vulnerability management and penetration testing solutions, today announced that it has secured $50 million in a series C round...
Vulnerabilities
Prison authorities are concerned about new security research demonstrating how attackers can hack into the industrial control systems used in the nation’s penitentiaries.
Vulnerabilities
Kindsight, an Alcatel-Lucent backed company that works with ISPs to analyze the behavior from their customer’s computers, has launched a new portal that details...
Vulnerabilities
Microsoft and Adobe Systems each released patches today to address critical security vulnerabilities in their products. For Patch Tuesday, Microsoft issued four security bulletins...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)