Commentary

Content posted in July 2013
DEF CON Kids To Get Badges That Hack
Commentary  |  7/29/2013  | 
Who says grown-ups should have all the fun with their DEF CON badges?
Barnaby Jack And The Hacker Ethos
Commentary  |  7/26/2013  | 
Barnaby Jack's untimely death should give us pause to remember why folks hack things and ultimately why pushing the boundaries of technology benefits us all
SMB Insider Threat: Setting Behavior Boundaries
Commentary  |  7/25/2013  | 
Two major policies should be in place to guide and restrict user behavior
Past Performance And Future Results
Commentary  |  7/24/2013  | 
Folks forget that Cisco used to be very good at doing acquisitions, so is it premature to determine recent performance predisposes future results regarding Sourcefire?
Can The NSA Really Track Turned-Off Cellphones?
Commentary  |  7/24/2013  | 
It depends on semantics, security experts say. What's clear is that surveillance is becoming much more sophisticated.
How NSA Data Demands On Microsoft Shape Your Security
Commentary  |  7/24/2013  | 
Microsoft is legally prevented from saying too much about charges it collaborated with the NSA. Product security gets caught in this complex situation.
Does User Awareness Help? Vendors Begin To Take Sides
Commentary  |  7/23/2013  | 
Security vendors such as FireEye speak in favor of awareness training -- even without a dog in the fight
Cloud File Storage Fight: No Knockout Yet
Commentary  |  7/23/2013  | 
Cloud file sharing services like Dropbox and Amazon continue to proliferate, with no clear winner. Enterprise IT still seeks ease of use and deployment.
APIs Giveth And APIs Taketh Away
Commentary  |  7/19/2013  | 
Despite the incredible power afforded by APIs exposing cloud, mobile and Web services, there is a downside. There always is
SMB Insider Threat: Don't Hire A Hacker
Commentary  |  7/17/2013  | 
Security advice to address the insider threat at a small to midsize business
NSA Surveillance: IT Pro Survey Says What?
Commentary  |  7/15/2013  | 
To understand the relationship between security and privacy, we should pay more attention to IT professionals and spend less time asking loaded questions.
Hacking The Emergency Alerting System
Commentary  |  7/15/2013  | 
More EAS devices vulnerable now than when vendors were alerted in January
Data Security: Who's Stealing Your Stuff?
Commentary  |  7/15/2013  | 
According to Verizon's annual Data Breach Investigation Report, it's not the NSA or even a sys admin with superuser privileges like Edward Snowden that's the biggest threat.
Budget-Friendly Android Apps For Security Monitoring
Commentary  |  7/15/2013  | 
Mobile network and performanance analysis doesn't have to be a costly. Find out how to turn a $100 Android device and some mobile apps into a security Swiss army knife.
Overcome The Microsoft Mindset: Patch Faster
Commentary  |  7/11/2013  | 
Why can't vendors patch every critical bug like it was the Pwn2Own competition?
Commercial DDoS Services Proliferate, Are Responsible For Many Recent Attacks
Commentary  |  7/10/2013  | 
Customers can DDoS a website for as little as $10, Vigilant by Deloitte speaker will tell Black Hat audience
Controlling The Big 7
Commentary  |  7/7/2013  | 
With limited resources, funding, and expertise, focusing on protecting the Big 7 applications will enable security professionals to reduce a large portion of their attack surface
License To Ill
Commentary  |  7/2/2013  | 
Unlicensed software exposes SMBs to lawsuits, viruses, and unwelcome guests


20 Questions to Ask Yourself before Giving a Security Conference Talk
Joshua Goldfarb, Co-founder & Chief Product Officer, IDDRA,  10/16/2017
Printers: The Weak Link in Enterprise Security
Kelly Sheridan, Associate Editor, Dark Reading,  10/16/2017
Hyatt Hit With Another Credit Card Breach
Dark Reading Staff 10/13/2017
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
The State of Ransomware
The State of Ransomware
Ransomware has become one of the most prevalent new cybersecurity threats faced by today's enterprises. This new report from Dark Reading includes feedback from IT and IT security professionals about their organization's ransomware experiences, defense plans, and malware challenges. Find out what they had to say!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.