Risks and Vulnerabilities

Understand what the risks mean and how to fix them when Google Safe Browsing flags your website for cybersecurity concerns.

The Diffie-Hellman key exchange is a method for agreeing to and calculating a secret symmetric key between parties on a public network.

Your HTTP response header carries server information. If exposed, that server information can increase your attack surface.

Implementing a DMARC policy protects your email recipients, while maintaining your domain and brand credibility.

LDAP provides communication with data, including sensitive data like user credentials, so take proactive security measures.

You use a database management system to interact with your stored data, so it's critical to implement security features that protect the DBMS and any data.

43% of all websites are built in WordPress, and custom sites rely on plugins and themes that can be attack vectors.

SysAid on-premises software faces a zero-day vulnerability for path traversal, currently tracked as CVE-2023-47246.

Tracking pixels are a powerful way to aggregate user behaviors, but they can also become a siphon for data leaks.

A misconfigured SSL certificate puts communication at risk, whereas a revoked certificate could render the site inaccessible to most browsers.

The Content Security Policy is a standard to prevent cross-site scripting attacks (XSS), clickjacking, packet sniffing, and malicious code injection.

CVE-2023-20198 is a critical, unpatched vulnerability impacting Internet-facing Cisco IOS XE devices.

If you do not set up an SPF record, untrustworthy emails from unauthorized sources can be sent to your employees and customers, seemingly from your domain.

CVE-2023-22515 is a privilege escalation and broken access control vulnerability affecting Confluence Data Center and Confluence Server.

UpGuard BreachSight provides continuous monitoring and automated scanning for potential threats, including exposed ports that known RATs can exploit.

A major vulnerability in the libwebp library puts web users at risk of remote code execution.