Database Security
Authentication
Privacy
Compliance
Careers & People
Identity & Access Management
Threat Intelligence
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Issue Archives
Dark Reading Tech Digest, Dec. 19, 2014
Publish Date: Dec 19,2014
Dark Reading, January 2015
Publish Date: Dec 15,2014
Dark Reading Must Reads, Dec. 10, 2014
Publish Date: Dec 10,2014
Dark Reading Must Reads, Dec. 8, 2014
Publish Date: Dec 8,2014
Dark Reading December Tech Digest
Publish Date: Nov 17,2014
Dark Reading's November Tech Digest
Publish Date: Nov 11,2014
Dark Reading's November Tech Digest
Publish Date: Nov 5,2014
Dark Reading's October Tech Digest
Publish Date: Oct 13,2014
Dark Reading Must Reads - September 25, 2014
Publish Date: Sep 25,2014
Dark Reading, September 16, 2014
Publish Date: Sep 16,2014
Dark Reading August 12, 2014 Tech Digest
Publish Date: Aug 12,2014
Dark Reading Must Reads August 5, 2014
Publish Date: Aug 5,2014
Dark Reading Must Reads July 15, 2014
Publish Date: Jul 15,2014
DarkReading Tech Digest -June 9, 2014
Publish Date: Jul 8,2014
Dark Reading June 2014 Tech Digest
Publish Date: Jun 9,2014
Dark Reading May 2014 Must Reads
Publish Date: May 28,2014
Dark Reading - June 2014
Publish Date: May 20,2014
Dark Reading April 2014
Publish Date: Mar 18,2014
Dark Reading February 2014 Tech Digest
Publish Date: Feb 10,2014
Dark Reading January 2014 Tech Digest
Publish Date: Jan 7,2014
Dark Reading December 2013 Must Reads
Publish Date: Dec 11,2013
Dark Reading December 2013 Issue
Publish Date: Dec 9,2013
Dark Reading December 2013 Must Reads
Publish Date: Dec 3,2013
Dark Reading November 2013 Special Issue
Publish Date: Oct 28,2013
Dark Reading October 2013 Issue
Publish Date: Oct 14,2013
Dark Reading October 2013 IT Trends
Publish Date: Oct 9,2013
Dark Reading October 2013 Must Reads - Risk Management
Publish Date: Oct 2,2013
Dark Reading October 2013 Must Reads
Publish Date: Sep 26,2013
Dark Reading September 2013 Special Issue
Publish Date: Sep 16,2013
Dark Reading August 2013 Issue
Publish Date: Aug 19,2013
Dark Reading August 2013 Special Issue
Publish Date: Aug 7,2013
Dark Reading July 2013 IT Trends
Publish Date: Jul 17,2013
Dark Reading July 2013 Must Reads
Publish Date: Jul 11,2013
Dark Reading June 2013 Digital Issue
Publish Date: Jun 3,2013
Dark Reading May 2013 Digital Supplement
Publish Date: May 20,2013
Dark Reading April 2013 Digital Issue
Publish Date: Apr 15,2013
DarkReading March 2013 Special Issue
Publish Date: Mar 11,2013
Dark Reading March 2013 Digital Supplement
Publish Date: Mar 4,2013
Dark Reading February 2013 Digital Issue
Publish Date: Feb 4,2013
Dark Reading November 2012 Special Issue
Publish Date: Nov 12,2012
Dark Reading November Special Issue
Publish Date: Oct 29,2012
Dark Reading October 2012 Issue
Publish Date: Oct 15,2012
Dark Reading September 17, 2012 Digital Supplement
Publish Date: Sep 17,2012
Dark Reading Special September 2012 Issue
Publish Date: Aug 27,2012
Dark Reading Special September 2012 Issue
Publish Date: Aug 22,2012
Dark Reading August 2012 Digital Supplement
Publish Date: Aug 15,2012
Dark Reading July 2012 Digital Issue
Publish Date: Jul 7,2012
Dark Reading May 2012 Digital Supplement
Publish Date: May 15,2012
Dark Reading April 2012 Digital Issue
Publish Date: Apr 15,2012
Dark Reading March 2012 Digital Supplement
Publish Date: Feb 27,2012
Dark Reading January 2012 Digital Supplement
Publish Date: Jan 26,2012
Dark Reading January 2012 Digital Issue
Publish Date: Jan 1,2012
Dark Reading December 2011 Digital Issue
Publish Date: Dec 15,2011
Dark Reading December 2011 Digital Issue
Publish Date: Dec 1,2011
Dark Reading October 2011 Digital Issue
Publish Date: Oct 4,2011
Dark Reading August 2011 Digital Issue
Publish Date: Aug 16,2011
Dark Reading July 2011 Digital Issue
Publish Date: Jul 1,2011
Dark Reading June 2011 Digital Issue
Publish Date: Jun 1,2011
Dark Reading April 2011 Digital Issue
Publish Date: Apr 1,2011
Dark Reading March 2011 Digital Issue
Publish Date: Mar 1,2011
Dark Reading January 2011 Digital Issue
Publish Date: Jan 1,2011
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-5211
Published: 2015-01-27
Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response.

CVE-2014-8154
Published: 2015-01-27
The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overf...

CVE-2014-9197
Published: 2015-01-27
The Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware before 1.60 IR 04 stores rde.jar under the web root with insufficient access control, which allows remote attackers to obtain sensitive setup and configuration information via a direct request.

CVE-2014-9198
Published: 2015-01-27
The FTP server on the Schneider Electric ETG3000 FactoryCast HMI Gateway with firmware through 1.60 IR 04 has hardcoded credentials, which makes it easier for remote attackers to obtain access via an FTP session.

CVE-2014-9646
Published: 2015-01-27
Unquoted Windows search path vulnerability in the GoogleChromeDistribution::DoPostUninstallOperations function in installer/util/google_chrome_distribution.cc in the uninstall-survey feature in Google Chrome before 40.0.2214.91 allows local users to gain privileges via a Trojan horse program in the ...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.