Vulnerabilities & Exploits

In a thorough investigation of gas pumps that use the Guardian aboveground storage tanks (AST) monitoring system in the United States, threat researchers Kyle Wilhoit and Stephen Hilt found one particular unit that has been tampered with.

2014 Annual Security Roundup: 2014 was the year of mega breaches, hard-to-patch vulnerabilities, and thriving cybercriminal underground economies.

Software vulnerabilities are a fact of life, and developers and users need to be more proactive when dealing with them, rather than simply being reactive. This video talks about vulnerabilities, their effects, and what can be done about them.

A new Cross-site Scripting vulnerability has recently come to light, allowing cybercriminals to hijack sessions, steal authentication cookies, and launch phishing attacks. Learn about XSS and find out what you can do to prevent this type of threat.

Trend Micro researchers found that the recently discovered Adobe Flash player zero-day vulnerability is being abused by malware advertisements used by a top video-sharing site, among other sites. Update: Adobe has released an update that addresses this vulnera

A new zero-day vulnerability has been discovered that affects the most current version of Adobe Flash.

Every year there are several zero-days and tons of undisclosed vulnerabilities fixed by software vendors. 2014 was a little different. Here are some of the year's most notable, and the lessons we can learn from them.

A list of the best security practices that enterprises can apply based on Trend Micro's security predictions for 2015.

Video games have reached a point where it's rare for one to not feature an online component, since connectivity enhances the experience. Unfortunately, it also opens up the user and the platform to a number of risks. What can a gamer do?