Vulnerabilities
AV Vendor Avast has announced that they’ll be sponsoring a bug bounty program, in order to reward researchers who discover flaws in their software....
Hi, what are you looking for?
SecurityWeek
Threat Intelligence
Desired Effect provides an ethical vulnerability exchange marketplace to help defenders get ahead of attackers.
Vulnerabilities
A vulnerability in SSL.com has resulted in nearly a dozen certificates for legitimate domains being wrongly issued.
Vulnerabilities
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
Vulnerabilities
Atlassian and Cisco have released patches for multiple high-severity vulnerabilities, including remote code execution bugs.
Vulnerabilities
Servers exposed to complete takeover due to CVE-2025-32433, an unauthenticated remote code execution flaw in Erlang/OTP SSH.
Vulnerabilities
A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild.
Network Security
Cisco on Wednesday issued a warning that its Wireless LAN Controller (Cisco WLC) products are affected by multiple security vulnerabilities that, if exploited, could...
Vulnerabilities
Many Web applications prompt users to sign in using their Twitter or Facebook accounts. While convenient for users, users have to make sure the...
Vulnerabilities
Oracle isn’t having a good month as far as PR and security is concerned. Adam Gowdiak, a researcher in Poland with Security Explorations, says...
Vulnerabilities
Hackers participating in this year's Pwn2Own contest at the CanSecWest conference in Vancouver will have more than just a web browser to use as...
Vulnerabilities
On the day that the company started a PR push for the Zscaler Application Profiler (ZAP), using a Cross-Site Scripting (XSS) flaw discovered in...
Vulnerabilities
A recently disclosed vulnerability in the Foxit PDF viewer has been patched in the latest software release. The issue, first discovered by Italian security...
Vulnerabilities
Researchers from Cylance, a stealth security firm based in Irvine, California, said they were able to hack into a medical management system and take...
Vulnerabilities
Steps Must be Taken To Protect From Expression Language Injection Vulnerabilities On Applications Built on The Spring Framework
Application Security
Last week, Ruby on Rails (RoR), a popular web application framework, was reported as vulnerable to critical vulnerabilities.
Security Infrastructure
Recent analysis from Frost & Sullivan shows that the security of critical facilities remains the topmost priority for the global oil and gas industry....
Vulnerabilities
Oracle addressed 86 flaws across 10 product groups in its quarterly Critical Patch Update. Some of the high-risk vulnerabilities, if exploited, would allow attackers...
Cybercrime
British retailer Marks & Spencer has been experiencing certain service disruptions after falling victim to a cyberattack.
Data Breaches
Artificial Intelligence
Malware & Threats
Data Protection
Application Security
Cybersecurity Funding
Data Breaches