Database Security
Authentication
Privacy
Compliance
Careers & People
Identity & Access Management
Threat Intelligence
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Issue Archives
Dark Reading Tech Digest, Dec. 19, 2014
Publish Date: Dec 19,2014
Dark Reading, January 2015
Publish Date: Dec 15,2014
Dark Reading Must Reads, Dec. 10, 2014
Publish Date: Dec 10,2014
Dark Reading Must Reads, Dec. 8, 2014
Publish Date: Dec 8,2014
Dark Reading December Tech Digest
Publish Date: Nov 17,2014
Dark Reading's November Tech Digest
Publish Date: Nov 11,2014
Dark Reading's November Tech Digest
Publish Date: Nov 5,2014
Dark Reading's October Tech Digest
Publish Date: Oct 13,2014
Dark Reading Must Reads - September 25, 2014
Publish Date: Sep 25,2014
Dark Reading, September 16, 2014
Publish Date: Sep 16,2014
Dark Reading August 12, 2014 Tech Digest
Publish Date: Aug 12,2014
Dark Reading Must Reads August 5, 2014
Publish Date: Aug 5,2014
Dark Reading Must Reads July 15, 2014
Publish Date: Jul 15,2014
DarkReading Tech Digest -June 9, 2014
Publish Date: Jul 8,2014
Dark Reading June 2014 Tech Digest
Publish Date: Jun 9,2014
Dark Reading May 2014 Must Reads
Publish Date: May 28,2014
Dark Reading - June 2014
Publish Date: May 20,2014
Dark Reading April 2014
Publish Date: Mar 18,2014
Dark Reading February 2014 Tech Digest
Publish Date: Feb 10,2014
Dark Reading January 2014 Tech Digest
Publish Date: Jan 7,2014
Dark Reading December 2013 Must Reads
Publish Date: Dec 11,2013
Dark Reading December 2013 Issue
Publish Date: Dec 9,2013
Dark Reading December 2013 Must Reads
Publish Date: Dec 3,2013
Dark Reading November 2013 Special Issue
Publish Date: Oct 28,2013
Dark Reading October 2013 Issue
Publish Date: Oct 14,2013
Dark Reading October 2013 IT Trends
Publish Date: Oct 9,2013
Dark Reading October 2013 Must Reads - Risk Management
Publish Date: Oct 2,2013
Dark Reading October 2013 Must Reads
Publish Date: Sep 26,2013
Dark Reading September 2013 Special Issue
Publish Date: Sep 16,2013
Dark Reading August 2013 Issue
Publish Date: Aug 19,2013
Dark Reading August 2013 Special Issue
Publish Date: Aug 7,2013
Dark Reading July 2013 IT Trends
Publish Date: Jul 17,2013
Dark Reading July 2013 Must Reads
Publish Date: Jul 11,2013
Dark Reading June 2013 Digital Issue
Publish Date: Jun 3,2013
Dark Reading May 2013 Digital Supplement
Publish Date: May 20,2013
Dark Reading April 2013 Digital Issue
Publish Date: Apr 15,2013
DarkReading March 2013 Special Issue
Publish Date: Mar 11,2013
Dark Reading March 2013 Digital Supplement
Publish Date: Mar 4,2013
Dark Reading February 2013 Digital Issue
Publish Date: Feb 4,2013
Dark Reading November 2012 Special Issue
Publish Date: Nov 12,2012
Dark Reading November Special Issue
Publish Date: Oct 29,2012
Dark Reading October 2012 Issue
Publish Date: Oct 15,2012
Dark Reading September 17, 2012 Digital Supplement
Publish Date: Sep 17,2012
Dark Reading Special September 2012 Issue
Publish Date: Aug 27,2012
Dark Reading Special September 2012 Issue
Publish Date: Aug 22,2012
Dark Reading August 2012 Digital Supplement
Publish Date: Aug 15,2012
Dark Reading July 2012 Digital Issue
Publish Date: Jul 7,2012
Dark Reading May 2012 Digital Supplement
Publish Date: May 15,2012
Dark Reading April 2012 Digital Issue
Publish Date: Apr 15,2012
Dark Reading March 2012 Digital Supplement
Publish Date: Feb 27,2012
Dark Reading January 2012 Digital Supplement
Publish Date: Jan 26,2012
Dark Reading January 2012 Digital Issue
Publish Date: Jan 1,2012
Dark Reading December 2011 Digital Issue
Publish Date: Dec 15,2011
Dark Reading December 2011 Digital Issue
Publish Date: Dec 1,2011
Dark Reading October 2011 Digital Issue
Publish Date: Oct 4,2011
Dark Reading August 2011 Digital Issue
Publish Date: Aug 16,2011
Dark Reading July 2011 Digital Issue
Publish Date: Jul 1,2011
Dark Reading June 2011 Digital Issue
Publish Date: Jun 1,2011
Dark Reading April 2011 Digital Issue
Publish Date: Apr 1,2011
Dark Reading March 2011 Digital Issue
Publish Date: Mar 1,2011
Dark Reading January 2011 Digital Issue
Publish Date: Jan 1,2011
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9676
Published: 2015-02-27
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

CVE-2014-9682
Published: 2015-02-27
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

CVE-2015-0655
Published: 2015-02-27
Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

CVE-2015-0884
Published: 2015-02-27
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

CVE-2015-0885
Published: 2015-02-27
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.