Vulnerabilities / Threats // Advanced Threats
News & Commentary
Cyber Lessons From The NSAs Admiral Michael Rogers
Nathaniel Gleicher, Head of Cybersecurity Strategy, IllummioCommentary
Security teams must get better at catching intruders where we have the advantage: on our own networks.
By Nathaniel Gleicher Head of Cybersecurity Strategy, Illummio, 1/19/2017
Comment0 comments  |  Read  |  Post a Comment
The 4 Top Barriers To Effective Incident Response
Ryan Benson, Senior Threat Researcher at ExabeamCommentary
Responding to cyberattacks is straightforward in some ways, difficult in others. Here are four ways that the process can get tripped up.
By Ryan Benson Senior Threat Researcher at Exabeam, 1/19/2017
Comment1 Comment  |  Read  |  Post a Comment
What CISOs Need To Know Before Adopting Biometrics
Todd Thibodeaux, President & CEO, CompTIACommentary
Biometric techniques offer a solution to the password problem, but getting started can be tough. Here are a few things you need to know.
By Todd Thibodeaux President & CEO, CompTIA, 1/18/2017
Comment0 comments  |  Read  |  Post a Comment
Close The Gap Between IT & Security To Reduce The Impact Of Cyber Threats
Travis Rosiek, Chief Technology Officer at TychonCommentary
IT and security teams work more effectively together than apart.
By Travis Rosiek Chief Technology Officer at Tychon, 1/17/2017
Comment1 Comment  |  Read  |  Post a Comment
Ransomware: How A Security Inconvenience Became The Industry's Most-Feared Vulnerability
Gur Shatz, CTO and co-founder, Cato NetworksCommentary
There are all sorts of ways to curb ransomware, so why has it spread so successfully?
By Gur Shatz CTO and co-founder, Cato Networks, 1/16/2017
Comment0 comments  |  Read  |  Post a Comment
The Sorry State Of Cybersecurity Awareness Training
Tom DeSot, Chief Information Officer of Digital DefenseCommentary
Rules aren't really rules if breaking them has no consequences.
By Tom DeSot Chief Information Officer of Digital Defense, 1/13/2017
Comment4 comments  |  Read  |  Post a Comment
Record Number of Vulns For Adobe, Microsoft, Apple In '16, Says ZDI
Terry Sweeney, Contributing EditorNews
Advantech makes surprise debut on vulnerability list at number two, right behind Adobe
By Terry Sweeney Contributing Editor, 1/10/2017
Comment0 comments  |  Read  |  Post a Comment
'Molecular' Cybersecurity Vs. Information Cybersecurity
David Zahn, General Manager of Cybersecurity at PASCommentary
When it comes to industrial processes, security begins at the molecular level.
By David Zahn General Manager of Cybersecurity at PAS, 1/10/2017
Comment0 comments  |  Read  |  Post a Comment
'Zero Trust': The Way Forward in Cybersecurity
John Kindervag, Vice President & Principal Analyst, ForresterCommentary
This approach to network design can cut the chance of a breach.
By John Kindervag Vice President & Principal Analyst, Forrester, 1/10/2017
Comment5 comments  |  Read  |  Post a Comment
The Limitations Of Phishing Education
Eyal Benishti, CEO & Founder of IRONSCALESCommentary
Human nature means that education will only go so far. Technology needs to take up the slack.
By Eyal Benishti CEO & Founder of IRONSCALES, 1/9/2017
Comment1 Comment  |  Read  |  Post a Comment
Why Ransomware Is Only Going To Get Worse
Rick Orloff, VP, Chief Security Officer, and Chief Privacy Officer at Code42Commentary
The meteoric rise of the problem stems from a lack of preparedness and simple economics.
By Rick Orloff VP, Chief Security Officer, and Chief Privacy Officer at Code42, 1/5/2017
Comment0 comments  |  Read  |  Post a Comment
A Look Inside Responsible Vulnerability Disclosure
Marc Laliberte, Information Security Threat Analyst, WatchGuard TechnologiesCommentary
It's time for security researchers and vendors to agree on a standard responsible disclosure timeline.
By Marc Laliberte Information Security Threat Analyst, WatchGuard Technologies, 1/5/2017
Comment1 Comment  |  Read  |  Post a Comment
Ransomware Has Evolved, And Its Name Is Doxware
Chris Ensey, COO of Dunbar Security SolutionsCommentary
The latest form of malware holds computers hostage and compromises the privacy of conversations, photos, and sensitive files.
By Chris Ensey COO of Dunbar Security Solutions, 1/4/2017
Comment3 comments  |  Read  |  Post a Comment
White House Announces Retaliatory Measures For Russian Election-Related Hacking
Sara Peters, Senior Editor at Dark ReadingNews
35 Russian intelligence operatives ejected from the US, and two of the "Cyber Most Wanted" are frozen out by Treasury Department.
By Sara Peters Senior Editor at Dark Reading, 12/29/2016
Comment8 comments  |  Read  |  Post a Comment
Cyberattack On Ukraine Conflict Watchdog
Dark Reading Staff, Quick Hits
Organization for Security Cooperation in Europe confirms data breach but does not name perpetrator.
By Dark Reading Staff , 12/29/2016
Comment1 Comment  |  Read  |  Post a Comment
The Bug Bounty Model: 21 Years & Counting
Jason Haddix, Head of Trust & Security, BugcrowdCommentary
A look back on the beginnings of crowdsourced vulnerability assessment and how its robust history is paving the way for the future.
By Jason Haddix Head of Trust & Security, Bugcrowd, 12/29/2016
Comment1 Comment  |  Read  |  Post a Comment
Chinas Cybersecurity Law Seeks Scrutiny Of Technology
Dark Reading Staff, Quick Hits
Countrys top internet regulator releases framework for stricter cyberspace laws, including review of local and foreign technology.
By Dark Reading Staff , 12/28/2016
Comment0 comments  |  Read  |  Post a Comment
8 Boldest Security Predictions For 2017
Ericka Chickowski, Contributing Writer, Dark Reading
Scary, funny and maybe even a little outlandish, these industry predictions come from prognosticators who didn't mince words.
By Ericka Chickowski Contributing Writer, Dark Reading, 12/27/2016
Comment5 comments  |  Read  |  Post a Comment
Democrats And Republicans Join In Demand For Select Cyber Panel
Dark Reading Staff, Quick Hits
Four senators push Mitch McConnell for select committee on foreign cyber threats and Russian interference in US presidential polls.
By Dark Reading Staff , 12/20/2016
Comment0 comments  |  Read  |  Post a Comment
Brute-Force Botnet Attacks Now Elude Volumetric Detection
Amir Shaked, VP ResearchCommentary
It just became harder to distinguish bot behavior from human behavior.
By Amir Shaked VP Research, 12/19/2016
Comment1 Comment  |  Read  |  Post a Comment
More Stories
Current Conversations
Posted by Elose
Current Conversations Thank you for article from french people !
In reply to: post">Re: Thank you for post
Post Your Own Reply
Posted by Shantaram
Current Conversations Cool! i like it!
In reply to: 192.168.0.1">Re: 192.168.0.1
Post Your Own Reply
More Conversations
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Security Technologies to Watch in 2017
Emerging tools and services promise to make a difference this year. Are they on your company's list?
Flash Poll
Secure Application Development - New Best Practices
Secure Application Development - New Best Practices
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
In past years, security researchers have discovered ways to hack cars, medical devices, automated teller machines, and many other targets. Dark Reading Executive Editor Kelly Jackson Higgins hosts researcher Samy Kamkar and Levi Gundert, vice president of threat intelligence at Recorded Future, to discuss some of 2016's most unusual and creative hacks by white hats, and what these new vulnerabilities might mean for the coming year.