Vulnerabilities
The Internet Software Consortium (ISC) has issued a fix for a bug in the BIND server software that has triggered crashes at organizations across...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Cybersecurity Funding
Boston-based Rapid7, a provider of vulnerability management and penetration testing solutions, today announced that it has secured $50 million in a series C round...
Vulnerabilities
Prison authorities are concerned about new security research demonstrating how attackers can hack into the industrial control systems used in the nation’s penitentiaries.
Vulnerabilities
Kindsight, an Alcatel-Lucent backed company that works with ISPs to analyze the behavior from their customer’s computers, has launched a new portal that details...
Vulnerabilities
Microsoft and Adobe Systems each released patches today to address critical security vulnerabilities in their products. For Patch Tuesday, Microsoft issued four security bulletins...
Supply Chain Security
Student Hackers Develop New Design Techniques to Protect Against Vulnerabilities in Vital Components in the Electronics Supply Chain
Network Security
A compromised server at the Massachusetts Institute of Technology (MIT) has been identified as being used as a vulnerability scanner and attack tool, probing...
Vulnerabilities
Microsoft has released a workaround to address the zero-day bug exploited in the Duqu attacks while it continues to work on a fix.
Vulnerabilities
Microsoft is slated to release four security bulletins as part of November’s Patch Tuesday, but the company is staying silent on when it will...
Vulnerabilities
Secunia has rolled out the “Secunia Vulnerability Coordination Reward Program” (SVCRP), a new program that aims to benefit both the IT community and end-users...
Vulnerabilities
It won’t be long before attackers discover that your home automation system is connected to everything.
Security Architecture
SSL Renegotiation Vulnerability Exploited via New Attack Tool to Launch DoS AttacksA German hacker group has released a new proof-of-concept tool for denial of...
Vulnerabilities
Hacking Electronic Voting Machines via Man-in-the-Middle Attacks
Vulnerabilities
Microsoft released fixes for 23 security vulnerabilities today as part of this month’s Patch Tuesday. The patches are tucked away in eight security bulletins,...
Cyberwarfare
Story Update: Air Force Officials Share Details on Malware That Infected Drone SystemsComputers controlling American military drones have been infected with a keylogger that tracks...
Vulnerabilities
After a relatively quiet Patch Tuesday in September, Microsoft is releasing fixes for 23 separate vulnerabilities in its security update next week.The patches will...
Endpoint Security
Danish security firm CSIS recently released the results of a three-month long study, backing a common line of thought in the security world. That...
Network Security
Vendors That Don't Test Products Before Selling Them are Doomed to be Targets of Future Research and Attacks
Malware & Threats
Like all computers, automobiles can be hacked and compromised. As auto manufacturers continue to rush new features to market, security cannot continue to be an...
Cybercrime
Three of the four most prevalent attack techniques observed were used by LulzSec during their summer hacking rampage.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)