Risk // Compliance
News & Commentary
Can Your Risk Assessment Stand Up Under Scrutiny?
Raymond Pompon, Principal Threat Research Evangelist at F5 Networks
Weak risk assessments have gotten a pass up until now, but that may be changing.
By Raymond Pompon Principal Threat Research Evangelist at F5 Networks, 7/27/2017
Comment1 Comment  |  Read  |  Post a Comment
10 Critical Steps to Create a Culture of Cybersecurity
Edward J. McAndrew, Partner & Co-Chair, Privacy & Data Security  Group, Ballard Spahr LLP, Faculty Member of the Compliance, Governance &  Oversight CouncilCommentary
Businesses are more vulnerable than they need to be. Here's what you should do about it.
By Edward J. McAndrew Partner & Co-Chair, Privacy & Data Security Group, Ballard Spahr LLP, Faculty Member of the Compliance, Governance & Oversight Council, 7/26/2017
Comment0 comments  |  Read  |  Post a Comment
Dealing with Due Diligence
Eldon Sprickerhoff, Founder and Chief Security Strategist,  eSentireCommentary
Companies will find themselves evaluating third-party cybersecurity more than ever -- and being subject to scrutiny themselves. Here's how to handle it.
By Eldon Sprickerhoff Founder and Chief Security Strategist, eSentire, 7/12/2017
Comment2 comments  |  Read  |  Post a Comment
The High Costs of GDPR Compliance
Chris Babel, CEO, TrustArcCommentary
Looming, increasingly strict EU privacy regulations are pushing privacy spending to the top of IT priorities and budgets.
By Chris Babel CEO, TrustArc, 7/11/2017
Comment0 comments  |  Read  |  Post a Comment
Black Hat Survey: Security Pros Expect Major Breaches in Next Two Years
Tim Wilson, Editor in Chief, Dark Reading, News
Significant compromises are not just feared, but expected, Black Hat attendees say.
By Tim Wilson, Editor in Chief, Dark Reading , 7/6/2017
Comment4 comments  |  Read  |  Post a Comment
8 Things Every Security Pro Should Know About GDPR
Jai Vijayan, Freelance writer
Organizations that handle personal data on EU citizens will soon need to comply with new privacy rules. Are you ready?
By Jai Vijayan Freelance writer, 6/30/2017
Comment1 Comment  |  Read  |  Post a Comment
Anthem Agrees to $115 Million Settlement for 2015 Breach
Dark Reading Staff, Quick Hits
If approved, it will dwarf settlements paid by Target, Home Depot, and Ashley Madison.
By Dark Reading Staff , 6/26/2017
Comment16 comments  |  Read  |  Post a Comment
In the Cloud, Evolving Infrastructure Means Evolving Alliances
Mike Convertino, CISO & VP, Information Security, F5 NetworksCommentary
New opportunities make for unusual bedfellows. Here's how to navigate the shift in organizational dynamics between security operations, line-of-business managers, and developers.
By Mike Convertino CISO & VP, Information Security, F5 Networks, 5/25/2017
Comment0 comments  |  Read  |  Post a Comment
You Have One Year to Make GDPR Your Biggest Security Victory Ever
Sara Peters, Senior Editor at Dark ReadingNews
The EU's new razor-toothed data privacy law could either rip you apart or help you create the best security program you've ever had. Here's how.
By Sara Peters Senior Editor at Dark Reading, 5/25/2017
Comment14 comments  |  Read  |  Post a Comment
Data Security & Privacy: The Risks of Not Playing by the Rules
Peter Merkulov, VP, Product Strategy & Technology AlliancesCommentary
Achieving compliance is a complex and challenging process. But with the right systems and policies, you can stay ahead of the next data breach and the regulators.
By Peter Merkulov VP, Product Strategy & Technology Alliances, 5/24/2017
Comment1 Comment  |  Read  |  Post a Comment
The Wide-Ranging Impact of New York's Cybersecurity Regulations
Mark Sangster, VP and industry security strategist, eSentireCommentary
New York's toughest regulations yet are now in effect. Here's what that means for your company.
By Mark Sangster VP and industry security strategist, eSentire, 5/16/2017
Comment0 comments  |  Read  |  Post a Comment
Users Overshare Sensitive Enterprise Data
Dawn Kawamoto, Associate Editor, Dark ReadingNews
Survey finds nearly half of the employees trained to protect sensitive data engage in risky security practices.
By Dawn Kawamoto Associate Editor, Dark Reading, 4/20/2017
Comment0 comments  |  Read  |  Post a Comment
Microsoft: Foreign Surveillance Requests Under FISA Shot Up in 2016
Dark Reading Staff, Quick Hits
The company received 1,000-1,499 surveillance requests from January0- toJune 2016, the highest since 2011.
By Dark Reading Staff , 4/14/2017
Comment0 comments  |  Read  |  Post a Comment
Health Savings Account Fraud: The Rapidly Growing Threat
Vitali Kremez, Director of Research, FlashpointCommentary
As income tax season comes to a close, financially-motivated cybercriminals are honing new tactics for monetizing medical PII.
By Vitali Kremez Director of Research, Flashpoint, 4/14/2017
Comment1 Comment  |  Read  |  Post a Comment
Cybersecurity & Fitness: Weekend Warriors Need Not Apply
Mike D. Kail, Chief Innovation Officer, CybricCommentary
It takes consistency and a repeatable but flexible approach to achieve sustainable, measurable gains in both disciplines.
By Mike D. Kail Chief Innovation Officer, Cybric, 4/12/2017
Comment0 comments  |  Read  |  Post a Comment
The New Shadow IT: Custom Data Center Applications
Kaushik Narayan, CTO, Skyhigh NetworksCommentary
If you think youve finally gotten control of unsanctioned user apps, think again. The next wave of rogue apps is on its way from your data center to the cloud.
By Kaushik Narayan CTO, Skyhigh Networks, 4/7/2017
Comment3 comments  |  Read  |  Post a Comment
11 UK Charities Punished for Violating Data Privacy Law
Dark Reading Staff, Quick Hits
Organizations fined between 6,000 and 18,000 by UKs Information Commissioners Office.
By Dark Reading Staff , 4/6/2017
Comment0 comments  |  Read  |  Post a Comment
GDPR Doesnt Need to be GDP-Argh!
Samantha Humphries, International Solutions Marketing Manager, Rapid7Commentary
These 10 steps will ease the pain of compliance with the General Data Protection Regulation, the EU's new privacy law that goes into effect in a little over a year.
By Samantha Humphries International Solutions Marketing Manager, Rapid7, 4/5/2017
Comment2 comments  |  Read  |  Post a Comment
As Cloud Use Expands, So Do Security Blind Spots, Studies Show
Ericka Chickowski, Contributing Writer, Dark ReadingNews
Three-quarters of IaaS and SaaS apps arent monitored.
By Ericka Chickowski Contributing Writer, Dark Reading, 4/4/2017
Comment2 comments  |  Read  |  Post a Comment
Privacy Babel: Making Sense of Global Privacy Regulations
Dimitri Sirota, Founder & CEO of BigIDCommentary
Countries around the world are making their own privacy laws. How can a global company possibly keep up?
By Dimitri Sirota Founder & CEO of BigID, 3/29/2017
Comment1 Comment  |  Read  |  Post a Comment
More Stories
Current Conversations
Posted by [email protected]
Current Conversations Hi, On the subject of Cybersecurity Conferences, this link might be of interest: (Events in Las Vegas) > https://infosec-conferences.com/events/cybersecurity-conferences-las-vegas/ Thanks
In reply to: Might be of interest to your readers
Post Your Own Reply
More Conversations
Register for Dark Reading Newsletters
Dark Reading Live EVENTS
INsecurity - For the Defenders of Enterprise Security
A Dark Reading Conference
While red team conferences focus primarily on new vulnerabilities and security researchers, INsecurity puts security execution, protection, and operations center stage. The primary speakers will be CISOs and leaders in security defense; the blue team will be the focus.
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Security Vulnerabilities: The Next Wave
Just when you thought it was safe, researchers have unveiled a new round of IT security flaws. Is your enterprise ready?
Flash Poll
New Best Practices for Secure App Development
New Best Practices for Secure App Development
The transition from DevOps to SecDevOps is combining with the move toward cloud computing to create new challenges - and new opportunities - for the information security team. Download this report, to learn about the new best practices for secure application development.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.