Cybersecurity News, Insights and Analysis | SecurityWeek
SecurityWeek provides cybersecurity news and information to global enterprises, with expert insights & analysis for IT security professionals
MITRE Updates List of 25 Most Dangerous Software Vulnerabilities
Nov 21, 2024 · “By following CISA’s initiatives, organizations can reduce vulnerabilities and strengthen application and infrastructure security. Incorporating the 2024 CWE Top 25 into cybersecurity and procurement strategies will enhance overall resilience,” the agency says.
ChatGPT Jailbreak: Researchers Bypass AI Safeguards Using …
Oct 29, 2024 · “The ChatGPT-4o guardrail bypass demonstrates the need for more sophisticated security measures in AI models, particularly around encoding. While language models like ChatGPT-4o are highly advanced, they still lack the capability to evaluate the safety of every step when instructions are cleverly obfuscated or encoded,” Figueroa said.. At the time of writing, …
Latest News - SecurityWeek
4 days ago · Cybersecurity News, Insights & Analysis
Google Patches Sixth Exploited Chrome Zero-Day of 2024
Aug 22, 2024 · The internet giant says it handed out $95,000 in bug bounty rewards to the reporting researchers, with the highest payout – of $36,000 – going to an anonymous researcher who found the use-after-free bug in Passwords (CVE-2024-7964).
Android’s September 2024 Update Patches Exploited Vulnerability
Sep 4, 2024 · Mobile & Wireless Android’s September 2024 Update Patches Exploited Vulnerability. Google has released Android security updates to patch an exploited local privilege escalation vulnerability.
Microsoft Hires New CISO in Major Security Shakeup
Dec 6, 2023 · Microsoft security boss Charlie Bell has quietly executed a major shakeup of the software giant’s security hierarchy, removing the CISO and Deputy CISO and handing the reins to Igor Tsyganskiy, a recent hire who previously served as CTO and President at asset management giant Bridgewater Associates.
Organizations Warned of Exploited Fortinet FortiOS Vulnerability
Oct 10, 2024 · The US cybersecurity agency CISA on Wednesday warned that a Fortinet FortiOS flaw patched in February is being exploited in the wild and has added it to its Known Exploited Vulnerabilities (KEV) list along with two Ivanti Cloud Services Appliance (CSA) bugs.
High-Severity Vulnerabilities Patched in Zoom, Chrome
Nov 13, 2024 · On Tuesday, Google announced the promotion of Chrome 131 to the stable channel with patches for 12 vulnerabilities, including eight reported by external researchers.. The most severe of the externally reported flaws is a high-severity inappropriate implementation bug in Blink, tracked as CVE-2024-11110, which was reported last month.
Palo Alto Patches Critical Firewall Takeover Vulnerabilities
Oct 9, 2024 · Palo Alto Networks on Wednesday pushed out patches for several serious flaws in its Expedition customer migration tool and warned that attackers can launch trivial exploits to take over firewall administrator accounts.