Vulnerabilities
On Tuesday, Microsoft patched over two dozen vulnerabilities across the Windows platform. At the same time, criminals started targeted a new vulnerability that has...
Hi, what are you looking for?
SecurityWeek
Network Security
Palo Alto warns that attackers can access usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls.
Vulnerabilities
Ivanti says a few more CSA zero-day vulnerabilities have been found to be exploited in attacks where they are chained with CVE-2024-8963.
Malware & Threats
Patch Tuesday: Redmond warns that attackers are rigging Microsoft Saved Console (MSC) files to execute remote code on targeted Windows systems.
Vulnerabilities
Adobe documents 25 vulnerabilities in Adobe Commerce and warns of code execution and privilege escalation exposure.
Vulnerabilities
SAP has released 12 new and updated security notes on October 2024 patch day, including one that fixes a critical flaw in BusinessObjects.
Vulnerabilities
Google and Amnesty have seen evidence that a Qualcomm chipset vulnerability tracked as CVE-2024-43047 may be exploited in the wild.
Vulnerabilities
Researchers are warning organizations that a recently-fixed authentication vulnerability in MySQL is simple to exploit.The authentication bypass, called "tragically comedic" by Rapid7's HD Moore,...
Vulnerabilities
Oracle has said that it would deliver 14 patches on Tuesday, in order to address serious security problems with the Java platform.“Due to the...
Vulnerabilities
Microsoft plans to issue fixes for 25 security vulnerabilities in its upcoming June 2012 Patch Tuesday update.
Cybercrime
Research from Trusteer shows that device fingerprinting, which is used in fraud detection systems, might be a useless layer of protection after they discovered...
Malware & Threats
Malware & Threats
Researchers at Trend Micro have discovered a malicious PowerPoint file circulating via email, which if executed, installs a backdoor on the victim’s system. The...
Application Security
In an effort to help organizations develop mobile applications that have security baked-in from the start, IBM has announced a series of static application...
Vulnerabilities
Following drama last month that started when Adobe said it would essentially force users to pay for an upgrade to address security vulnerabilities in...
Vulnerabilities
Google Two-Factor Authentication Flaw Led to Breach at CloudFlare, Exposed Other Google Apps for Business CustomersLate last week, news broke that web security and...
Cyberwarfare
Earlier this week, SecurityWeek reported on news that Cambridge University researchers discovered a backdoor on a field-programmable gate array (FPGA) chip used by the...
Mobile & Wireless
Wave Systems has signed a 15-year software license and distribution agreement with Samsung, enabling Samsung to bundle Wave’s EMBASSY Security Center (ESC) and TCG...
ICS/OT
The largest U.S. water utility disconnects customer portal and suspends billing services following a cyberattack.
Malware & Threats
Nation-State
Management & Strategy
Data Breaches
Network Security
ICS/OT
A cyberattack continues to affect the largest regulated water and wastewater utility company in the US, renewing a focus on the importance of protecting...
Fraud & Identity Theft
Fraud & Identity Theft
Data Breaches
