Dark Reading

Commentary

• 

  0-Day The (Bug) Bounty Hunter

  By Mike Rothman

  Companies increasingly offer bug bounties to help find vulnerabilities and threats. This is an opportunity for those looking to get into security

  | Read Article >>

• 

  Letter Of (Cyber) Marque And Reprisal

  By Gunter Ollmann

  Facilitating future 'hack back' programs

  | Read Article >>

• 

  Why Database Assessment?

  By Adrian Lane

  How FIS bungled the basics

  | Read Article >>

• 

  Putting Vulnerabilities And Threats Into Context

  By Mike Rothman

  Advanced security research should play a role in your security program and be ready when science projects become weaponized attacks

  | Read Article >>

• 

  What To Ask Your Penetration Tester

  By Vincent Liu

  The importance of manual pen testing

  | Read Article >>

• 

  DoS-in Your Database

  By Adrian Lane

  The re-emergence of database denial-of-service attacks

  | Read Article >>

• 

  Building An Effective Security Architecture: No Piece Of Cake

  By Tim Wilson

  Enterprises need to put more thought, fewer products into their cyberdefense strategies

  | Read Article >>

• 

  Exclusive: Pwnie Express Evolves The Role Of The Pen Tester

  By David Schwartzberg- Sophos

  Pwnie Express recently released Citadel PX, which will expand the role of the pen tester. The new offering will enable greater marketability while improving quality of life

  | Read Article >>

More >>

Products & Releases

• DeepCover Secure Authenticator From Maxim Integrated Protects Designs With Strong Public-Key Cryptography

• Armadillo Adds Data Classification Capability With Boldon James Partnership

• Lieberman Software Launches First Security-As-A-Service PIM Platform

• EiQ Networks Announces ThreatVue

• Cloud Security Corporation Files U.S. Patent Application for One-Time Password System And Methods On A Mobile Computing Device

• ESET Releases ESET NOD32 Antivirus 7 And ESET Smart Security 7 In BETA

• New PenTest Portal To Encourage Client In-House Testing

• The Allstate Corporation: New Poll Shows Americans Anxious About Privacy

More >>

Best of the Web

• Vast array of medical devices vulnerable to serious hacks, feds warn
• Officials: Edward Snowden took NSA secrets on thumb drive
• CBS News confirms multiple breaches of Sharyl Attkisson’s computer
• Content Security Policy 1.0 Lands In Firefox
• iPhones can auto-connect to rogue Wi-Fi networks, researchers warn

More >>

Security Video

Dark Reading Slideshows

News

• Researcher To Open-Source Tools For Finding Odd Authentication Behavior

  Rather than watching for communications between infected systems and command-and-control servers, companies can detect stealthy malware when it attempts to spread

  | Read Article >>

• Snowden Says U.S. Hacking Chinese Civilians Since 2009

  NSA whistle-blower says U.S. spies on people using computers at Hong Kong's Chinese University, as well as government officials and businesses in mainland China

• Black Hat USA 2013 Reveals Turbo Talks On Top Topics

  High-speed sessions will focus on content from almost every corner of security space

  | Read Article >>

• Cyberespionage Operators Work In Groups, Process Enormous Data Workloads

  A group of Taiwanese researchers peer into the operations center of a group behind one large espionage campaign

  | Read Article >>

More >>

Quick Hits

• Medical Devices Subject To Cyberattack, FDA Warns

  Food and Drug Administration issues alert on vulnerabilities in medical devices

  | Read Article >>

• Iranians Targeted In Massive Phishing Campaign

  Google spotted targeted attacks out of Iran against tens of thousands of Iranians in the run-up to the country's presidential election on Friday

  | Read Article >>

More >>