New Google paper calls for increased transparency from vendors regarding their vulnerability management practices.
The post Google Proposes More Transparent Vulnerability Management Practices appeared first on SecurityWeek.
New Google paper calls for increased transparency from vendors regarding their vulnerability management practices.
The post Google Proposes More Transparent Vulnerability Management Practices appeared first on SecurityWeek.
Sophos patches critical unauthenticated code execution vulnerability in Sophos Web Appliance.
The post Sophos Patches Critical Code Execution Vulnerability in Web Security Appliance appeared first on SecurityWeek.
Nexx has ignored repeated attempts to report critical product vulnerabilities that can be exploited to remotely open garage doors, and take control of alarms and smart plugs.
The post Nexx Ignores Vulnerabilities Allowing Hackers to Remotely Open Garage Doors appeared first on SecurityWeek.
Water pumping systems made by ProPump and Controls are affected by several vulnerabilities that could allow hackers to cause significant problems.
The post Unpatched Security Flaws Expose Water Pump Controllers to Remote Hacker Attacks appeared first on SecurityWeek.
An Azure Active Directory (AAD) misconfiguration leading to Bing.com compromise earned Wiz researchers a $40,000 bug bounty reward.
The post Microsoft Cloud Vulnerability Led to Bing Search Hijacking, Exposure of Office 365 Data appeared first on SecurityWeek.
A new research report discusses the five most exploited vulnerabilities of 2022, and the five key risks that security teams should consider.
The post Most Weaponized Vulnerabilities of 2022 and 5 Key Risks: Report appeared first on SecurityWeek.
A vulnerability in Google Pixel phones allows for the recovery of an original, unedited screenshot from the cropped version.
The post Google Pixel Vulnerability Allows Recovery of Cropped Screenshots appeared first on SecurityWeek.
SAP has released 19 new notes on March 2023 Security Patch Day, including five notes rated hot news.
The post SAP Releases Five ‘Hot News’ Notes on March 2023 Patch Day appeared first on SecurityWeek.
Reports published by various industrial cybersecurity companies provide different numbers on ICS vulnerabilities — here’s why.
The post Counting ICS Vulnerabilities: Examining Variations in Numbers Reported by Security Firms appeared first on SecurityWeek.
Researchers discover a dozen serious vulnerabilities in Akuvox smart intercom, but the vendor has not released any patches.
The post Unpatched Akuvox Smart Intercom Vulnerabilities Can Be Exploited for Spying appeared first on SecurityWeek.