Network Security
BeyondTrust has released a new version of its free “Community Edition” Retina vulnerability assessment tool. With Retina Community, enterprises can perform on-the-fly assessments without...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Splunk patches high-severity remote code execution and information disclosure flaws in Splunk Enterprise and Secure Gateway App.
ICS/OT
Forescout has found dozens of vulnerabilities in solar power systems from Sungrow, Growatt and SMA.
Artificial Intelligence
OpenAI has raised its maximum bug bounty payout to $100,000 (up from $20,000) for high-impact flaws in its infrastructure and products.
Malware & Threats
Exploitation of Windows MMC zero-day is being pinned on a ransomware gang known as EncryptHub (an affiliate of RansomHub)
ICS/OT
Production line monitoring cameras made by Inaba can be hacked for surveillance and sabotage, but they remain unpatched.
Vulnerabilities
Threat actors have started probing servers impacted by a critical-severity vulnerability in the web application development framework Next.js.
Vulnerabilities
Microsoft is prepping seven security bulletins for next week's Patch Tuesday, as well as moving forward with plans to make an update restricting the...
Cybercrime
As I wander the world of website security, I run across many reasons why most websites (over 70%) are open to hacks from amateur...
Mobile & Wireless
The security vulnerability that could fully wipe Samsung Galaxy S III device appears to not be limited to just Samsung devices after all, but...
Cybercrime
On Tuesday, SourceForge and the phpMyAdmin project reported that one of their mirrors was serving a compromised version of the MySQL management application. The...
Vulnerabilities
Researchers from Security Explorations, the group who pointed out that the recently released patch to address a previous vulnerability in Java was easily bypassed,...
Vulnerabilities
Security researchers have found a way to use an Android device to game certain types of cards used to pay for rides on transit...
Mobile & Wireless
During the EUSecWest security conference last week in Amsterdam, researchers taking part in the Pwn2Own Mobile contest showed off a new attack vector in...
Vulnerabilities
As promised, Microsoft has patched Internet Explorer against the recently disclosed Zero-Day that made headlines all week. In addition, they patched four other flaws that...
Data Protection
A security researcher from Application Security, Inc. (AppSec) has discovered a flaw in Oracle’s software that would allow an attacker to crack database passwords...
Vulnerabilities
New Tool Checks To See If MySQL Servers Are At Risk From The MySQL CVE-2012-2122 Vulnerability
Security Infrastructure
Attackers can remotely login to a control system used by electric utilities and oil and gas companies via a backdoor to gain administrative access,...
Cyberwarfare
The vulnerability, tracked as CVE-2025-2783, was chained with a second exploit for remote code execution in attacks targeting organizations in Russia.
Hacker Conversations
Supply Chain Security
Mobile & Wireless
Cloud Security
Management & Strategy
