Author

 Curtis Dalton
Twitter
LinkedIn
RSS
E-Mail

Profile of Curtis Dalton

SVP & Global Head of Security Services for Pactera US (a Blackstone portfolio company)
Member Since: 3/2/2016
Author
News & Commentary Posts: 1
Comments: 0

Curtis Dalton is an information security and technology executive with 24 years' experience and a proven track record in management, technology and security. Prior to joining Pactera, Dalton was Chief Information Security Officer for Sapient - a global IT services and digital services provider. For Sapient, Dalton developed an acclaimed security program rooted in ISO 27001 globally to support a burgeoning business which doubled over his tenure.
Dalton's experience dates back to the beginning of the security profession when he helped develop one of the first firewalls, implemented one of the first global VPN solutions, and developed an early Data Loss Prevention solution in the mid '90's. Dalton is a published author & speaker with fifteen articles and cover stories appearing within leading publications, and a popular security architecture book published by Osborne McGraw-Hill. Dalton is certified as CISSP, CISM, ISMS Lead Auditor/Lead Implementer and is an active member within the information security community including ISC2, ISACA, ISSA, InfraGard and IAPP.

Articles by Curtis Dalton
WebAuthn, FIDO2 Infuse Browsers, Platforms with Strong Authentication
John Fontana, Standards & Identity Analyst, Yubico,  9/19/2018
Turn the NIST Cybersecurity Framework into Reality: 5 Steps
Mukul Kumar & Anupam Sahai, CISO & VP of Cyber Practice and VP Product Management, Cavirin Systems,  9/20/2018
NSS Labs Files Antitrust Suit Against Symantec, CrowdStrike, ESET, AMTSO
Kelly Jackson Higgins, Executive Editor at Dark Reading,  9/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: "I'm not sure I like this top down management approach!"
Current Issue
Flash Poll
The Risk Management Struggle
The Risk Management Struggle
The majority of organizations are struggling to implement a risk-based approach to security even though risk reduction has become the primary metric for measuring the effectiveness of enterprise security strategies. Read the report and get more details today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17338
PUBLISHED: 2018-09-23
An issue has been found in pdfalto through 0.2. It is a heap-based buffer overflow in the function TextPage::dump in XmlAltoOutputDev.cc.
CVE-2018-17341
PUBLISHED: 2018-09-23
BigTree 4.2.23 on Windows, when Advanced or Simple Rewrite routing is enabled, allows remote attackers to bypass authentication via a ..\ substring, as demonstrated by a launch.php?bigtree_htaccess_url=admin/images/..\ URI.
CVE-2018-17332
PUBLISHED: 2018-09-22
An issue was discovered in libsvg2 through 2012-10-19. The svgGetNextPathField function in svg_string.c returns its input pointer in certain circumstances, which might result in a memory leak caused by wasteful malloc calls.
CVE-2018-17333
PUBLISHED: 2018-09-22
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in svgStringToLength in svg_types.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because sscanf is misused.
CVE-2018-17334
PUBLISHED: 2018-09-22
An issue was discovered in libsvg2 through 2012-10-19. A stack-based buffer overflow in the svgGetNextPathField function in svg_string.c allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because a strncpy copy limit is miscalculated.