10 Newsmakers Who Shaped Security In the Past Decade
Verizon DBIR: Over Half Of Data Breaches Exploited Legitimate Passwords In 2015
Crowdsourcing The Dark Web: A One-Stop Ran$om Shop
8 Signs Your Security Culture Lacks Consistency
Top 10 Web Hacking Techniques For 2015
News & Commentary
The Hidden Flaws Of Commercial Applications
Ericka Chickowski, Contributing Writer, Dark ReadingNews
Open source components in commercial applications are more plentiful than organizations think -- and they're full of long-standing vulnerabilities.
By Ericka Chickowski Contributing Writer, Dark Reading, 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
Ransomware Spikes, Tries New Tricks
Jai Vijayan, Freelance writerNews
Ransomware authors constantly upping their game, techniques, to stay ahead of security researchers.
By Jai Vijayan Freelance writer, 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
Utility's Server Hacked, Infected With Ransomware
Dark Reading Staff, Quick Hits
Electricity, water supply uninterrupted while authorities work on solution to locked files.
By Dark Reading Staff , 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
Dental Association Unknowingly Sends Virus To Members
Dark Reading Staff, Quick Hits
American Dental Association (ADA) admits that some USB devices it mailed contain malware, advises caution.
By Dark Reading Staff , 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
Women In Security: What Are You Missing?
Lynda Grindstaff, Senior Director of the Innovation Pipeline, Intel Security
For security jobs, men outnumber women by a long shot. It's time to start thinking and recruiting differently.
By Lynda Grindstaff Senior Director of the Innovation Pipeline, Intel Security, 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
8 Microsoft Office 365 Security Tips To Reduce Data Loss
Sean Martin, CISSP | President, imsmartin
Even with a slew of new security tools and compliance guidance, there are still things you can do to protect this critical business system.
By Sean Martin CISSP | President, imsmartin, 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
How To Succeed At Third-Party Cyber Risk Management: 10 Steps
Charlie Miller, Senior Vice President, The Santa Fe GroupCommentary
Organizations are failing -- and badly -- assessing the risk of attacks and data breaches from vendors and supply chains, according to a recent Ponemon Institute study. The solution starts at the top.
By Charlie Miller Senior Vice President, The Santa Fe Group, 5/2/2016
Comment0 comments  |  Read  |  Post a Comment
6 Steps for Responding to a Disruptive Attack
Steve Zurier, Freelance Writer
Today’s threat landscape dictates that companies must have a workable incident response plan.
By Steve Zurier Freelance Writer, 4/29/2016
Comment0 comments  |  Read  |  Post a Comment
Stop Building Silos. Security Is Everyone’s Problem
Robert Reeves, CTO & Co-Founder, DaticalCommentary
Yes, it’s true that the speed of DevOps has made security more difficult. But that doesn’t mean accelerated release cycles and secure applications have to be mutually exclusive.
By Robert Reeves CTO & Co-Founder, Datical, 4/29/2016
Comment0 comments  |  Read  |  Post a Comment
Symantec CEO Brown’s Exit Highlights Company’s Continuing Struggles
Jai Vijayan, Freelance writerNews
For the third time since 2012, Symantec is looking for a new CEO to help turn around the business.
By Jai Vijayan Freelance writer, 4/29/2016
Comment0 comments  |  Read  |  Post a Comment
Qatar National Bank Probes Possible Data Breach
Dark Reading Staff, Quick Hits
Bank details exposed include those of ruling family and defense officials, reports say.
By Dark Reading Staff , 4/29/2016
Comment1 Comment  |  Read  |  Post a Comment
San Bernardino iPhone Hack Tool Cost FBI ‘Under $1 Million’
Dark Reading Staff, Quick Hits
Agency now owns mechanism that can exploit unknown Apple security flaws.
By Dark Reading Staff , 4/29/2016
Comment2 comments  |  Read  |  Post a Comment
Hacker Group Exploits 'Hot Patching' In Windows To Cloak Cyber Espionage
Rutrell Yasin, Business Technology Writer, Tech Writers BureauNews
Group called Platinum employs spear phishing and malicious use of hot patching to steal information from government agencies in Asia.
By Rutrell Yasin Business Technology Writer, Tech Writers Bureau, 4/28/2016
Comment1 Comment  |  Read  |  Post a Comment
Government Cybersecurity Performance, Confidence Bottoms Out
Ericka Chickowski, Contributing Writer, Dark ReadingNews
In the wake of OPM and other big gov breaches, government cybersecurity performance scores and employee confidence ratings sink through the floor.
By Ericka Chickowski Contributing Writer, Dark Reading, 4/28/2016
Comment0 comments  |  Read  |  Post a Comment
The Morning After: What Happens to Data Post Breach?
Raj Samani , Chief Technology Officer of Intel Security’s Europe, Middle East and Africa division
We need consumers and businesses to not simply shrug off data breaches but to take active measures to protect their data. We are hopeful that new insights will provide a compelling answer to the question “So what?”
By Raj Samani Chief Technology Officer of Intel Security’s Europe, Middle East and Africa division, 4/28/2016
Comment0 comments  |  Read  |  Post a Comment
How To Stay Secure At The Hotel On A Business Trip
Emily Johnson, Associate Editor, UBM AmericasNews
As POS malware attacks on hotels increase and threat actors target executives, traveling for business puts company data at risk.
By Emily Johnson Associate Editor, UBM Americas, 4/28/2016
Comment9 comments  |  Read  |  Post a Comment
6 Reasons ISPs Must Step Up Defenses Against DDoS Attacks
Vincent Berk, Commentary
Conducting a DDoS attack used to require a significant amount of talent. But today, a high school student with basic hacking skills can access tools that will challenge even the most experienced ISP security teams.
By Vincent Berk , 4/28/2016
Comment0 comments  |  Read  |  Post a Comment
10 Newsmakers Who Shaped Security In the Past Decade
Kelly Jackson Higgins, Executive Editor at Dark Reading
In celebration of Dark Reading’s 10th anniversary, we profile ten people whose actions influenced and shaped the trajectory of the industry – for better or for worse -- in the past ten years.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 4/28/2016
Comment0 comments  |  Read  |  Post a Comment
German Nuclear Power Plant Infected With Malware
Dark Reading Staff, Quick Hits
Conficker, Ramnit malware found in Gundremmingen 'harmless' since the affected systems were not connected to the Internet.
By Dark Reading Staff , 4/28/2016
Comment0 comments  |  Read  |  Post a Comment
Estonian Man Gets 7-Year Sentence For Clickjacking Attacks
Dark Reading Staff, Quick Hits
Cybercrime gang jailed for click-fraud scheme affecting 4 million computers in over 100 countries.
By Dark Reading Staff , 4/28/2016
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
PR Newswire
How To Stay Secure At The Hotel On A Business Trip
Emily Johnson, Associate Editor, UBM Americas,  4/28/2016
Mexican Voter Database Exposed
Dark Reading Staff 4/26/2016
4 Tips For Planning An Effective Security Budget
Rutrell Yasin, Freelance Writer,  4/27/2016
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
Partner Perspectives
What's This?
Partner Perspectives
What's This?
Endpoint Security: Putting The Focus On What Matters
Five tips to help sift through the noise and focus on actions that can dramatically impact your endpoint security program. Read >>
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "He keeps trolling Tumblr by posting 'Yes, this is dog.'"
Dark Reading Radio
Archived Dark Reading Radio
Join us as Dark Reading editors speak with IT security hiring experts about improving IT career prospects.
White Papers
Current Issue
Understanding & Managing the Mobile Security Threat
Mobile devices are increasing IT security risk. Is your enterprise ready?
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Flash Poll
Video
Slideshows
Twitter Feed