Cloud Security
Cloud Based Solution Helps Developers Reduce the Cost of Identifying and Fixing Software Defects
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Attackers could exploit them for command execution, memory overwrites, and privilege escalation.
Vulnerabilities
Attackers could exploit the bugs to tamper with certificate entries, achieve remote code execution, and compromise hosts.
Vulnerabilities
The massive drop comes after the company integrated frontier AI models into its product security testing.
ICS/OT
Pre-Patch Tuesday advisories were published by VDE CERT, Phoenix Contact, Johnson Controls, and Hitachi Energy.
Application Security
Rapid7, a Boston, Massachusetts based provider of vulnerability management and penetration testing solutions, today announced the availability of Metasploit Pro, its new software targeted...
Endpoint Security
Adobe today announced its new Acrobat X Family of products, which includes Adobe Reader X as well as Acrobat X Suite, Acrobat X Pro,...
Mobile & Wireless
Vulnerability Could Allow Attacker to Execute Arbitrary Code or Cause a denial-of-service ConditionRIM has released a security advisory to address a security issue in...
Compliance
Qualys, a provider of on demand IT security risk and compliance management solutions, today announced that it is offering two-factor authentication to its QualysGuard customers...
Vulnerabilities
Vulnerabilities
Oracle Critical Patch Update for October, 2010 to fix 81 VulnerabilitiesOracle issued a Pre-Release Announcement this week, providing advance information about the Oracle Critical...
Application Security
While Bugs May No Longer Be Free, Exploits Really Want To Be
Funding/M&A
CSC today announced that it has acquired Vulnerability Research Labs (VRL), a privately held cyber threat intelligence firm based in Columbia, Maryland.
Malware & Threats
Qualys today announced the release of the second annual “Top Cyber Security Risks Report.” featuring new data from HP TippingPoint DVLabs, SANS Institute and...
Network Security
Integration with QualysGuard Allows Sourcefire to Adapt Protection to Known Vulnerabilities on a Customer’s Network Sourcefire and Qualys today announced a product collaboration in...
Malware & Threats
.LNK Exploits - Shortcuts to InsecurityThe vulnerability in Windows Shell’s parsing of .LNK (shortcut) files presents some interesting and novel features in terms of...
Malware & Threats
In 2010, 25 percent of new worms have been specifically designed to spread through USB storage devices when connected to computers.These types of threats...
Application Security
IBM released its X-Force 2010 Mid-Year Trend and Risk Report today, which showed record threat levels in almost every area.
Funding/M&A
HP to Acquire Fortify SoftwareHP (NYSE:HPQ) announced today that it has signed a definitive agreement to acquire Fortify Software, a privately held software security...
Mobile & Wireless
Foxit Reader Updated to Address Security Issues Caused by iPhone & iPad Jailbreak ProgramFoxit has released Foxit Reader 4.1.1.0805 to address a vulnerability associated...
Vulnerabilities
Fat Tuesday – Microsoft’s Patch Tuesday to Include 14 Security Bulletins Covering 34 Vulnerabilities
Microsoft has released the advanced notification for its upcoming Patch Tuesday security update release, in which the company will be issuing 14 security bulletins...
Network Security
Cisco Security Advisory - Firewall Services ModuleCisco has released a security advisory that deals with certain vulnerabilities found in its Cisco Firewall Services Module...
Vulnerabilities
Security solutions provider Rapid7 has launched the latest version of its vulnerability management solution, NeXpose, which will help local governments and private enterprises adhere...
Black Hat
Samy Kamkar, in an incredibly interesting session at Black Hat titled “How I Met Your Girlfriend,” highlighted new types attacks executed from the Web.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)