Security Architecture
Got Vulnerabilities? Deal with it.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
ICS/OT
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Vulnerabilities
In a rare move, Oracle broke its normal procedures and issued an emergency patch due to concerns about the impact of a successful attack.The...
ICS/OT
Since the discovery of Stuxnet in 2010, there has been a bit of a bull’s eye on the software used to run industrial control...
Application Security
If Patch Tuesday is a party, this would be the IT security version of pre-gaming.On Aug. 9, Microsoft accidentally released information on the five...
Vulnerabilities
Microsoft has a relatively light Patch Tuesday planned for next week with no critical patches.According to the company’s pre-patch advisory, Microsoft plans to release...
Vulnerabilities
As more and more digital technology is introduced into automobiles, the threat of malicious software and hardware manipulation increases. ISec Partners’ researchers got a lot...
Security Infrastructure
The gap between vulnerability and protection is a distance that can be measured both by the amount of time that sensitive database information goes...
Cybercrime
A number of servers belonging to kernel.org were compromised last month in an attack that may have started with a stolen user credential.According to...
Vulnerabilities
Armorize Technologies, a provider of Web application security solutions, today released a free version of its source code analysis solution catering to non-commercial, educational,...
Vulnerabilities
Google has plugged 11 security holes in its latest update for the Chrome browser, including one that garnered a critical rating.
Application Security
Last week at the Black Hat Conference in Las Vegas, SaaS-based IT security solution provider Qualys, made several announcements including a new QualysGuard Consultant...
Management & Strategy
Microsoft released 13 security bulletins today as part of Patch Tuesday, including two rated “critical” – its highest security rating. But according to some...
Black Hat
Vulnerabilities
Microsoft today announced “BlueHat Prize,” a contest designed to generate new ideas for defensive approaches to support computer security. Microsoft’ goals is to inspire...
Endpoint Security
The specter of advanced persistent threats (APTs) hangs over a growing number of conversations these days about enterprise security, and has prompted businesses to...
Security Infrastructure
Data security firm Imperva, today released the results of study which revealed that web applications are probed or attacked about 27 times per hour...
Vulnerabilities
Foxit Corporation, maker of popular the PDF reader, has patched Foxit Reader 5.0.2 to address a security vulnerability and other bugs.
Vulnerabilities
RIM this week released a security advisory to address a vulnerability in the BlackBerry Administration API included in the BlackBerry Enterprise Server that may...
Vulnerabilities
Add mice and keyboards to the list of UBS-based peripherals now suspect in any corporate environment. In recent weeks several gadget blogs have been...
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)