Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
Number Of Data Breach Disclosures Jumped 40% in 2016
Newest First  |  Oldest First  |  Threaded View
Shantaram
50%
50%
Shantaram,
 User Rank: Ninja
1/20/2017 | 12:26:42 PM
Re: 192.168.0.1
Thanks, nice thoughts!
kbannan100
50%
50%
kbannan100,
 User Rank: Apprentice
1/19/2017 | 11:30:13 PM
Data loss
There's a Ponemon study that finds 62 percent of respondents said they are "pessimistic about their ability to prevent the loss of data contained in printer mass storage and/or printed hard copy documents." I wonder how many breaches came from something simple yet underprotected such as printers? Also from the study: "56 percent of respondents believe employees in their organizations don't see printers and hard copy documents as an area of high security risk." 

Add people who don't see printers as a risk to the fact that there are still printers that are unsecured or unpatched and you've got a problem. 

--Karen Bannan for IDG and HP


'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12705
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have XSS via the SSID (it is validated only on the client side).
CVE-2018-12706
PUBLISHED: 2018-06-24
DIGISOL DG-BR4000NG devices have a Buffer Overflow via a long Authorization HTTP header.
CVE-2018-12714
PUBLISHED: 2018-06-24
An issue was discovered in the Linux kernel through 4.17.2. The filter parsing in kernel/trace/trace_events_filter.c could be called with no filter, which is an N=0 case when it expected at least one line to have been read, thus making the N-1 index invalid. This allows attackers to cause a denial o...
CVE-2018-12713
PUBLISHED: 2018-06-24
GIMP through 2.10.2 makes g_get_tmp_dir calls to establish temporary filenames, which may result in a filename that already exists, as demonstrated by the gimp_write_and_read_file function in app/tests/test-xcf.c. This might be leveraged by attackers to overwrite files or read file content that was ...
CVE-2018-12697
PUBLISHED: 2018-06-23
A NULL pointer dereference (aka SEGV on unknown address 0x000000000000) was discovered in work_stuff_copy_to_from in cplus-dem.c in GNU libiberty, as distributed in GNU Binutils 2.30. This can occur during execution of objdump.