Collaborate Disseminate
Workday appears to have joined the list of major companies that had their Salesforce instances targeted by hackers.
The post Workday Data Breach Bears Signs of Widespread Salesforce Hack appeared first on SecurityWeek.
Continue reading Workday Data Breach Bears Signs of Widespread Salesforce Hack
Android pKVM has achieved SESIP Level 5 certification, which means it’s resistant to highly skilled, motivated, and funded attackers.
The post Google Says Android pKVM Earns Highest Level of Security Assurance appeared first on SecurityWeek.
Continue reading Google Says Android pKVM Earns Highest Level of Security Assurance
Rockwell Automation has published several advisories describing critical and high-severity vulnerabilities affecting its products.
The post Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products appeared first on SecurityWeek.
Continue reading Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products
Cisco has released over 20 advisories as part of its August 2025 bundled publication for ASA, FMC and FTD products.
The post Cisco Patches Critical Vulnerability in Firewall Management Platform appeared first on SecurityWeek.
Continue reading Cisco Patches Critical Vulnerability in Firewall Management Platform
Path traversal and XXE injection flaws allowing unauthenticated remote code execution have been patched in Xerox FreeFlow Core.
The post Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution appeared first on SecurityWeek.
Continue reading Vulnerabilities in Xerox Print Orchestration Product Allow Remote Code Execution
CISA reported becoming aware of attacks exploiting CVE-2025-8875 and CVE-2025-8876 in N-able N-central on the day they were patched.
The post CISA Warns of Attacks Exploiting N-able Vulnerabilities appeared first on SecurityWeek.
Continue reading CISA Warns of Attacks Exploiting N-able Vulnerabilities
The new DDoS attack vector, which involves HTTP/2 implementation flaws, has been compared to Rapid Reset.
The post ‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks appeared first on SecurityWeek.
Continue reading ‘MadeYouReset’ HTTP2 Vulnerability Enables Massive DDoS Attacks
Researchers at enterprise browser security firm SquareX showed how an attacker can impersonate a user and bypass passkey security.
The post Passkey Login Bypassed via WebAuthn Process Manipulation appeared first on SecurityWeek.
Continue reading Passkey Login Bypassed via WebAuthn Process Manipulation
Intel, AMD and Nvidia have published security advisories describing vulnerabilities found recently in their products.
The post Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia appeared first on SecurityWeek.
Continue reading Chipmaker Patch Tuesday: Many Vulnerabilities Addressed by Intel, AMD, Nvidia
The RansomHub ransomware group stole sensitive information from staffing and recruiting firm Manpower in January.
The post Manpower Says Data Breach Stemming From Ransomware Attack Impacts 140,000 appeared first on SecurityWeek.
Continue reading Manpower Says Data Breach Stemming From Ransomware Attack Impacts 140,000