Vulnerabilities
Google has released a Chrome 120 update to resolve six vulnerabilities, including four reported by external researchers.
Hi, what are you looking for?
SecurityWeek
Vulnerabilities
Successful exploitation could lead to unexpected behavior or denial-of-service (DoS) conditions.
Vulnerabilities
It abuses CLFS and Windows Defender to trigger arbitrary file creation in the context of the antimalware process.
Malware & Threats
PHP2Shell enabled initial compromise, while CVE-2026-123039 allowed attackers to elevate privileges to root.
Vulnerabilities
Dubbed 4EverAble2Shell, the flaw could allow remote, unauthenticated attackers to execute code with root privileges.
Vulnerabilities
Attackers can abuse a new DLL search order hijacking technique to execute code in applications within the WinSxS folder.
Cloud Security
Two flaws in Google Kubernetes Engine could be exploited to escalate privileges and take over the Kubernetes cluster.
Vulnerabilities
Shadowserver sees possible in-the-wild exploitation of a critical Apache OFBiz vulnerability tracked as CVE-2023-49070.
Vulnerabilities
Noteworthy stories that might have slipped under the radar: Cryptocurrency exchange hacker pleads guilty, rating LLM vulnerabilities, Intellexa spyware analysis.
Vulnerabilities
Ivanti has patched 20 vulnerabilities in its Avalanche MDM product, including a dozen remote code execution flaws rated critical.
Vulnerabilities
Google warns of in-the-wild exploitation of CVE-2023-7024, a new Chrome vulnerability, the eighth documented this year.
Vulnerabilities
Firefox and Thunderbird security updates released this week address multiple memory safety bugs in both products.
Malware & Threats
Akamai researchers document more vulnerabilities and patch bypasses leading to zero-click remote code execution in Microsoft Outlook.
Network Security
The US cybersecurity agency CISA issues cybersecurity recommendations for the healthcare and public health sector.
Vulnerabilities
3CX tells customers to temporarily disable SQL Database integration to mitigate a potential vulnerability.
Cybercrime
Noteworthy stories that might have slipped under the radar: Ukraine hacks Russia’s federal tax agency, CVE assigned to PLC exploit, security in new Intel...
Risk Management
Zoom launches an open source Vulnerability Impact Scoring System (VISS) tested within its bug bounty program.
Vulnerabilities
Attackers are attempting to exploit a critical RCE flaw in Apache Struts 2 after researchers publish PoC code.
Data Protection
Dell is informing PowerProtect DD product customers about 8 vulnerabilities, including many rated ‘high severity’, and urging them to install patches.
Vulnerabilities
A Chrome 120 security update resolves nine vulnerabilities, including five high-severity flaws reported externally.
Vulnerabilities
Sophos has patched EOL Firewall versions against a critical flaw exploited in the wild, after identifying a new exploit.
Phishing
Microsoft warns of critical spoofing and remote code execution bugs in the Windows MSHTML Platform and Microsoft Power Platform Connector.
Application Security
Adobe warned users on both Windows and macOS systems about exposure to code execution, memory leaks and denial-of-service security issues.
Vulnerabilities
SAP patches multiple vulnerabilities in the Business Technology Platform, including a critical elevation of privilege bug.
Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.
RegisterJoin to learn the four levels of architecting security into the agentic SDLC – from securing the code your developers' agents write to running a coordinated system of security agents you've built yourself.
RegisterExpert Insights
Every autonomous AI agent deployed across your enterprise today is a new proxy identity operating inside your perimeter.
(Danelle Au)
As organizations eliminate passwords, attackers will adapt. Instead of attacking the authenticator directly, they will look for opportunities around it.
(Torsten George)
Risk managers are trained to spot weak signals, plan for disruption and make hard decisions under uncertainty. But the discipline looks different when the risk is not a system or an enterprise, but you.
(Steve Durbin)
The process that gates nearly every B2B deal is a self-assessment the sender distrusts and the receiver accepts. There is finally a better basis for trust between companies.
(Sravish Sridhar)
Keep your patch management pipelines primed in case another round of Citrix NetScaler patches get released soon.
(Tod Beardsley)