Vulnerabilities
On the day that the company started a PR push for the Zscaler Application Profiler (ZAP), using a Cross-Site Scripting (XSS) flaw discovered in...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Noteworthy stories that might have slipped under the radar: Capital One hacker’s sentence reversed, Google patches critical Chrome vulnerability, the story of an Expat...
Vulnerabilities
CISA has added an absolute path traversal bug in Nakivo Backup and Replication to its Known Exploited Vulnerabilities list.
Vulnerabilities
Veeam has released patches for a critical-severity remote code execution vulnerability in Backup & Replication.
Vulnerabilities
SANS is seeing attempts to exploit two critical Cisco Smart Licensing Utility vulnerabilities tracked as CVE-2024-20439 and CVE-2024-20440.
Vulnerabilities
Nearly 8,000 new vulnerabilities affecting the WordPress ecosystem were reported last year, nearly all in plugins and themes.
Artificial Intelligence
Vulnerabilities in Nvidia Riva could allow hackers to abuse speech and translation AI services that are typically expensive.
Vulnerabilities
A recently disclosed vulnerability in the Foxit PDF viewer has been patched in the latest software release. The issue, first discovered by Italian security...
Vulnerabilities
Researchers from Cylance, a stealth security firm based in Irvine, California, said they were able to hack into a medical management system and take...
Vulnerabilities
Steps Must be Taken To Protect From Expression Language Injection Vulnerabilities On Applications Built on The Spring Framework
Application Security
Last week, Ruby on Rails (RoR), a popular web application framework, was reported as vulnerable to critical vulnerabilities.
Security Infrastructure
Recent analysis from Frost & Sullivan shows that the security of critical facilities remains the topmost priority for the global oil and gas industry....
Vulnerabilities
Oracle addressed 86 flaws across 10 product groups in its quarterly Critical Patch Update. Some of the high-risk vulnerabilities, if exploited, would allow attackers...
Vulnerabilities
Adobe on Tuesday released a hotfix to address four vulnerabilities affecting ColdFusion running on Windows, Mac OS and UNIX platforms.
Malware & Threats
On Monday, Kaspersky Lab uncovered details of a complex cyber espionage campaign dubbed 'Operation Red October' that has been targeting specific groups throughout the...
Vulnerabilities
Microsoft on Monday released a patch to address the recently discovered Internet Explorer vulnerability linked to a series of watering hole attacks.
Vulnerabilities
Last week, researchers discovered a Java vulnerability being widely exploited online, as it was included in several crime kits, including Blackhole and Cool Exploit....
Vulnerabilities
Microsoft has said it would release a patch this afternoon, out-of-band, that will address the recently discovered Internet Explorer vulnerability that has been used...
Supply Chain Security
More details have come to light on the recent supply chain attack targeting GitHub Actions, including its root cause.
Mobile & Wireless
Cloud Security
Artificial Intelligence
Application Security
Supply Chain Security
Artificial Intelligence