Coverage tagged "Vulnerability".
Sweet Security has announced the release of Virtual Patching, a new capability that protects running cloud and AI applications from specific vulnerabilities the moment they are identified. Security…
Hackers have stolen passwords, access credentials and other sensitive data belonging to customers of Russian hosting provider FirstVDS after exploiting a vulnerability in software used to manage its…
OpenBSD flaws, including a 37-year-old BSD bug, enable local attackers to bypass security protections and gain root access. Patches are available. Cybersecurity firm Calif published a full exploit…
A flaw in Broadcom's Wi-Fi setup software lets an attacker within radio range run code as root on Broadcom-based routers, without the network password or any pairing step, security researcher Quentin…
Bearer CLI is a free static application security testing (SAST) tool that scans source code for vulnerabilities and prioritizes them by the sensitive data they touch. SAST means the tool reads code…
arXiv:2610.22457v1 Announce Type: new Abstract: Recent advances in video generation have increased the demand for reliable watermarking for copyright protection, yet the robustness of video…
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers.
Posted by Peter Gutmann on Oct 17 Solar Designer writes: I was actually going to request whether the neverending Apache avalanche could be turned into a daily digest with links to the individual…
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.
Posted by Solar Designer on Oct 16 Hi, Here's an update: We stayed in the range of 319 to 400 accepted messages per month for June through September. However, the number of subscribers started…
Serial Number: AV26-1059 Date: October 16, 2026 As of October 15, 2026, BMC Helix is affected by a vulnerability in the following product: BMC Helix Network Management Prior to 26.3.01 The Cyber…
Serial Number: AV26-1058 Date: October 16, 2026 As of October 14, 2026, Progress is affected by vulnerabilities in the following product: MOVEit Transfer Prior to 2025.1.6 Prior to 2026.0.4 The Cyber…
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address…
Posted by Bharath SM on Oct 16 cifs-utils 7.9 fixes a mount-option injection vulnerability in mount.cifs that can allow local privilege escalation in affected privileged mounting configurations…
Serial number: AV26-1057 Date: October 16, 2026 As of October 13, 2026, Mozilla is affected by vulnerabilities in the following products: Firefox ESR Prior to 153.5 Prior to 115.43 Firefox Prior to…
Serial number: AV26-1056 Date: October 16, 2026 As of October 15, 2026, Palo Alto Networks is affected by a vulnerability in the following product: Idira Secrets Manager (Self-Hosted) Prior to…
As AI accelerates vulnerability discovery and exploitation, financial institutions need evidence that their defenses can withstand the attack paths an adversary could actually use. This solution…
Serial number: AV26-1055 Date: October 16, 2026 As of October 16, 2026, Moxa is affected by vulnerabilities in the following product: AIG-302 Series Prior to or equal to v1.4.1 The Cyber Centre…
In addition to RCE flaws, Microsoft fixed multiple information disclosure bugs and a security bypass issue in Office.
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August.
