Vulnerabilities
Sometime around the beginning of November, thieves managed to insert an additional circuit board into the self checkout Point of Sale (POS) machines Lucky’s...
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites.
Vulnerabilities
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.
Vulnerabilities
Cisco is investigating the impact of the Erlang/OTP remote code execution vulnerability CVE-2025-32433 on its products.
Threat Intelligence
Desired Effect provides an ethical vulnerability exchange marketplace to help defenders get ahead of attackers.
Vulnerabilities
A vulnerability in SSL.com has resulted in nearly a dozen certificates for legitimate domains being wrongly issued.
Vulnerabilities
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
Vulnerabilities
NT OBJECTives, an application security vendor based in Irvine, California, has released a new tool that not only scans for SQL Injection vulnerabilities, but...
Network Security
Security researchers have uncovered more details about the recent Adobe Reader and Acrobat exploit that is being used in attacks targeting U.S. defense firms....
Vulnerabilities
Updated Story: Researchers Confirm Attackers Targeted Defense Firms with Adobe Reader Zero-day
Application Security
Software-as-a-Service (SaaS) security solutions vendor Qualys, today announced updates to its QualysGuard Web Application Scanning suite, including the ability to integrate with Selenium, the...
Vulnerabilities
Is the Potential of an Attacker Setting a Printer on Fire Really What IT Security Departments Should be Worried About?
Malware & Threats
The appearance of a new exploit has helped turn the spotlight this week on a common target of attackers – Java software.
Vulnerabilities
The Internet Software Consortium (ISC) has issued a fix for a bug in the BIND server software that has triggered crashes at organizations across...
Cybersecurity Funding
Boston-based Rapid7, a provider of vulnerability management and penetration testing solutions, today announced that it has secured $50 million in a series C round...
Vulnerabilities
Prison authorities are concerned about new security research demonstrating how attackers can hack into the industrial control systems used in the nation’s penitentiaries.
Vulnerabilities
Kindsight, an Alcatel-Lucent backed company that works with ISPs to analyze the behavior from their customer’s computers, has launched a new portal that details...
Vulnerabilities
Microsoft and Adobe Systems each released patches today to address critical security vulnerabilities in their products. For Patch Tuesday, Microsoft issued four security bulletins...
CISO Strategy
This tension between hard-edged risk realism and breathless AI evangelism sets an unmistakable tone for a bellwether conference where 40,000-plus gather to do business.
Management & Strategy
Data Breaches
Artificial Intelligence
Management & Strategy
IBM will invest more than $30 billion in research and development to advance and continue its American manufacturing of mainframe and quantum computers.
Cybersecurity Funding
Cloud Security
Data Breaches