Vulnerabilities
Google and Mozilla have released patches for 21 and 15 vulnerabilities in Chrome and Firefox, respectively.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
The mod_http2 race condition, CVE-2026-119618, could let unauthenticated attackers execute code on servers with HTTP/2 enabled.
Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
Vulnerabilities
The malicious activity started shortly after a researcher dropped over 30 zero-days. N-able patched the unauthenticated ones.
Vulnerabilities
Attackers could exploit a critical Red Hat Quay flaw to steal private container images, overwrite repositories and maintain persistent access.
Malware & Threats
The Windows vulnerability carries a CVSS severity score of 9.8/10 and can be exploited by via specially crafted malicious MSMQ packets.
Malware & Threats
Patch Tuesday: Adobe fixes critical flaws and warns of the risk of code execution attacks on Windows and macOS platforms.
Vulnerabilities
Redfox Security warns of multiple vulnerabilities in Netgear WNR614 routers discontinued three years ago.
Vulnerabilities
SAP has released 10 new security notes on June 2024 Security Patch Day, including two addressing high-severity vulnerabilities.
Malware & Threats
Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.
Artificial Intelligence
A critical vulnerability in the PyTorch distributed RPC framework could be exploited for remote code execution.
Vulnerabilities
PHP has released patches for CVE-2024-4577, a critical vulnerability that could lead to arbitrary code execution on remote servers.
Vulnerabilities
Nvidia patches multiple high-severity vulnerabilities in GPU display drivers and virtual GPU software.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: TikTok patches account hijacking zero-day, $300 million DMM Bitcoin hack, free Android VPN apps analyzed.
Vulnerabilities
SolarWinds has released patches for high-severity vulnerabilities in Serv-U and the SolarWinds Platform.
Malware & Threats
Akamai warns that a Chinese threat actor is exploiting years-old remote code execution vulnerabilities in ThinkPHP in new attacks.
Vulnerabilities
GreyNoise has observed a rapid increase in the number of exploitation attempts targeting a recent Check Point VPN zero-day.
Vulnerabilities
It took code security firm Kiuwan nearly two years to patch several serious vulnerabilities found in its SAST products.
Vulnerabilities
Critical vulnerabilities in discontinued Zyxel NAS products allow unauthenticated attackers to execute arbitrary code and OS commands.
Government
Cisco has released a security advisory after researchers discovered that the German government’s Webex meetings were exposed.
Vulnerabilities
SonicWall has shared technical details on a recently addressed high-severity remote code execution flaw in Confluence.
Vulnerabilities
A critical vulnerability in the Progress Telerik Report Server could allow unauthenticated attackers to access restricted functionality.
Vulnerabilities
CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation.
Malware & Threats
Malicious campaign exploits high-severity XSS flaws in three WordPress plugins to backdoor websites.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)