Adobe rolls out a big batch of security updates to fix at least 30 Acrobat and Reader vulnerabilities affecting Windows and macOS users.
The post Patch Tuesday: Adobe Patches 30 Acrobat, Reader Vulns appeared first on SecurityWeek.
To boost user privacy, Apple is requiring app developers to declare a reason to use specific APIs.
The post Apple Lists APIs That Developers Can Only Use for Good Reason appeared first on SecurityWeek.
Thinking through the good, the bad, and the ugly now is a process that affords us “the negative focus to survive, but a positive one to thrive.”
The post The Good, the Bad and the Ugly of Generative AI appeared first on SecurityWeek.
Securing APIs is a noble, though complex journey. Security teams can leverage these 10 steps to help secure their APIs.
The post 10 Steps to Help Secure Your APIs appeared first on SecurityWeek.
QuickBlox SDK and API vulnerabilities impact chat and video applications used by industries including telemedicine, smart IoT, and finance.
The post API Flaw in QuickBlox Framework Exposed PII of Millions of Users appeared first on SecurityWeek.
Software maker calls special attention to CVE-2023-29300, a deserialization of untrusted data bug with a CVSS severity score of 9.8/10.
The post Adobe Patch Tuesday: Critical Flaws Haunt InDesign, ColdFusion appeared first on SecurityWeek.
VMware confirmed that exploit code for CVE-2023-20864 has been published, underscoring the urgency for enterprise network admins to apply available patches.
The post Exploit Code Published for Remote Root Flaw in VMware Logging Software appeared first on SecurityWeek.
SwSec 5D framework aims to provide a roadmap for secure software development, and its use would help improve security in the software supply chain.
The post OWASP SwSec 5D Tool Provides SDLC Maturity Ratings, Aids Software Supply Chain appeared first on SecurityWeek.
Hackers linked to the Truebot malware are exploiting a year-old Netwrix Auditor flaw to break into organizations in the U.S. and Canada.
The post Truebot Hackers Exploiting Netwrix Auditor Flaw: CISA, FBI Alert appeared first on SecurityWeek.
Use-after-free and OS command injection vulnerabilities reach the top five most dangerous software weaknesses in the 2023 CWE Top 25 list.
The post MITRE Updates CWE Top 25 Most Dangerous Software Weaknesses appeared first on SecurityWeek.
Privacy Settings
This website uses cookies to improve your experience while you navigate through the website.
