Vulnerability Management

The "ProxyNotShell" security vulnerabilities can be chained for remote code execution and total takeover of corporate email platforms.

China-based threat actor used poisoned vSphere Installation Bundles to deliver multiple backdoors on systems, security vendor says.

Bugs in Canon Medical's Virea View could allow cyberattackers to access several sources of sensitive patient data.

External researchers contributed 16 of the 20 security updates included in the new Chrome 106 Stable Channel rollout, including five high-severity bugs.

Vulnerable configurations, software flaws, and exposed Web services allow hackers to find exploitable weaknesses in companies' perimeters in just hours, not days.

There are numerous strategies to lessen the possibility and effects of a cyberattack, but doing so takes careful planning and targeted action.

For white hats who play by the rules, here are several ethical tenets to consider.

The bug allows unauthenticated code execution on the company's firewall products, and CISA says it poses "significant risk" to federal government.

An unpatched flaw in more than 350,000 unique open source repositories leaves software applications vulnerable to exploit. The path traversal-related vulnerability is tracked as CVE-2007-4559.

Alleged teen hacker claims he found an admin password in a network share inside Uber that allowed complete access to ride-sharing giant's AWS, Windows, Google Cloud, VMware, and other environments.

Be wary of being pestered into making a bad decision. As digital applications proliferate, educating users against social engineering attempts is a key part of a strong defense.

Several models of EZVIZ cameras are open to total remote control by cyberattackers, and image exfiltration and decryption.

The entire security team should share in the responsibility to secure sensitive data.

New executive order stops short of mandating NIST's guidelines, but recommends SBOMs for federal agencies across government.

Honeypot activity exposed two credentials that the threat actor is using to host and distribute malicious container images, security vendor says.