Perimeter
News & Commentary
Spam Levels Spike, Thanks In Part To Ransomware
Sara Peters, Senior Editor at Dark ReadingNews
By shipping banking Trojans and ransomware that turn big profits fast, spammers can now afford the high overhead of high-volume spam campaigns.
By Sara Peters Senior Editor at Dark Reading, 9/23/2016
Comment0 comments  |  Read  |  Post a Comment
On-Premises & In The Cloud: Making Sense Of Your Cybersecurity Ecosystem
Yishai Beeri, Director of Cybersecurity Research, CloudLockCommentary
As enterprises continue to invest in hybrid cloud strategies, they need their fragmented security solutions to work together.
By Yishai Beeri Director of Cybersecurity Research, CloudLock, 9/23/2016
Comment0 comments  |  Read  |  Post a Comment
A Twist On The Cyber Kill Chain: Defending Against A JavaScript Malware Attack
Marc Laliberte, Information Security Threat Analyst, WatchGuard TechnologiesCommentary
This slightly modified model is a practical way to keep attackers out of your systems.
By Marc Laliberte Information Security Threat Analyst, WatchGuard Technologies, 9/21/2016
Comment0 comments  |  Read  |  Post a Comment
Keep It Simple: Security For A Complex Enterprise
Dark Reading Staff, CommentaryVideo
Michelle Cobb of Skybox Security talks to Dark Reading about security management.
By Dark Reading Staff , 9/14/2016
Comment0 comments  |  Read  |  Post a Comment
8 Security Categories Healthcare Providers Need to Improve On
Steve Zurier, Freelance Writer
A new survey by HIMSS finds that many providers dont even cover the basics of IT security.
By Steve Zurier Freelance Writer, 9/6/2016
Comment1 Comment  |  Read  |  Post a Comment
The Secret Behind the NSA Breach: Network Infrastructure Is the Next Target
Yoni Allon, Research Team Leader, LightCyberCommentary
How the networking industry has fallen way behind in incorporating security measures to prevent exploits to ubiquitous routers, proxies, firewalls, and switches.
By Yoni Allon Research Team Leader, LightCyber, 8/25/2016
Comment0 comments  |  Read  |  Post a Comment
User Ed: Patching People Vs Vulns
Lysa Myers, Security Researcher, ESETCommentary
How infosec can combine and adapt security education and security defenses to the way users actually do their jobs.
By Lysa Myers Security Researcher, ESET, 8/17/2016
Comment0 comments  |  Read  |  Post a Comment
Substantially Above Par: DR Cartoon Caption Contest Winners
Marilyn Cohodas, Community Editor, Dark ReadingCommentary
Critical vulnerabilities, links & virtual reality. And the winner is...
By Marilyn Cohodas Community Editor, Dark Reading, 8/12/2016
Comment0 comments  |  Read  |  Post a Comment
Data Protection From The Inside Out
Dan Frank, Deloitte Advisory Principal, Cyber Risk ServicesCommentary
Organizations must make fundamental changes in the way they approach data protection.
By Dan Frank Deloitte Advisory Principal, Cyber Risk Services, 8/8/2016
Comment1 Comment  |  Read  |  Post a Comment
Dark Reading News Desk Coming Back To Black Hat, Live
Sara Peters, Senior Editor at Dark ReadingNews
Live from Las Vegas: over 40 video interviews with Black Hat USA conference speakers and sponsors. Wednesday Aug. 3, Thursday Aug, 4, starting at 2 p.m. ET.
By Sara Peters Senior Editor at Dark Reading, 8/4/2016
Comment1 Comment  |  Read  |  Post a Comment
How To Stay Safe On The Black Hat Network: Dont Connect To It
Neil R. Wyler (Grifter), Threat Hunting and Incident Response Specialist, RSACommentary
Black Hat attendees may have changed their titles and now carry business cards but hackers gotta hack and theres no better place to do it than Black Hat.
By Neil R. Wyler (Grifter) Threat Hunting and Incident Response Specialist, RSA, 7/28/2016
Comment11 comments  |  Read  |  Post a Comment
Building Black Hat: Locking Down One Of The Worlds Biggest Security Conferences
Aamir Lakhani, Senior Security Strategist & Hacker, Fortinet, FortiGuard Advanced LabsCommentary
For security pros, being asked to help secure Black Hat is like being asked to play on the Olympic basketball team.
By Aamir Lakhani Senior Security Strategist & Hacker, Fortinet, FortiGuard Advanced Labs, 7/25/2016
Comment0 comments  |  Read  |  Post a Comment
7 Need-To-Know Attack Stats
Ericka Chickowski, Contributing Writer, Dark Reading
Facts & figures about average dwell times, incident response speeds, and which direction the 'detection deficit' is heading.
By Ericka Chickowski Contributing Writer, Dark Reading, 6/21/2016
Comment3 comments  |  Read  |  Post a Comment
Symantecs Purchase of Blue Coat Fills Critical Product Gap, Interim President Says
Jai Vijayan, Freelance writerNews
Combined business will have a product portfolio that is wide enough to address all threat vectors, Ajei Gopal says.
By Jai Vijayan Freelance writer, 6/16/2016
Comment0 comments  |  Read  |  Post a Comment
Cisco Invests $10 Million To Tackle Cybersecurity Talent Gap
Rutrell Yasin, Business Technology Writer, Tech Writers BureauNews
The companys Global Cybersecurity Scholarship program is looking to diversify the talent pool by working with veterans, women and those early in their careers.
By Rutrell Yasin Business Technology Writer, Tech Writers Bureau, 6/14/2016
Comment7 comments  |  Read  |  Post a Comment
Symantec To Spend $4.65 Billion On Blue Coat
Dark Reading Staff, Quick Hits
Deal will reportedly make company the worlds largest enterprise security business by revenues, but some in infosec industry are concerned.
By Dark Reading Staff , 6/14/2016
Comment0 comments  |  Read  |  Post a Comment
The End Of A Security Decade -- And The Beginning Of A New One
Tim Wilson, Editor in Chief, Dark ReadingCommentary
Dark Reading wraps up its 10th anniversary coverage with a final look back at the decade -- and a look ahead.
By Tim Wilson Editor in Chief, Dark Reading, 6/10/2016
Comment1 Comment  |  Read  |  Post a Comment
Microsegmentation & The Need For An Intelligent Attack Surface
Doug Gourlay,  Corporate VP, Skyport SystemsCommentary
There is a fundamental difference in the security posture and technology for protecting the White House versus a Social Security office in California. So, too, for the critical apps and systems that are likely targets in your enterprise.
By Doug Gourlay Corporate VP, Skyport Systems, 6/7/2016
Comment0 comments  |  Read  |  Post a Comment
10 Sea-Changing IT Security Trends Of The Last 10 Years
Tim Wilson, Editor in Chief, Dark ReadingNews
A look at ten of the megatrends that have shaped IT security -- and in some cases, enterprise business -- over the last decade.
By Tim Wilson Editor in Chief, Dark Reading, 5/31/2016
Comment1 Comment  |  Read  |  Post a Comment
GhostShell Leaks Data From 32 Sites In Light Hacktivism Campaign
Dark Reading Staff, Quick Hits
After a few months of silence, the Romanian hacktivist is back to expose the dangers of leaving FTP ports unprotected.
By Dark Reading Staff , 5/17/2016
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
PR Newswire
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Five Emerging Security Threats - And What You Can Learn From Them
At Black Hat USA, researchers unveiled some nasty vulnerabilities. Is your organization ready?
Flash Poll
Title Partners Role in Perimeter Security
Title Partners Role in Perimeter Security
Considering how prevalent third-party attacks are, we need to ask hard questions about how partners and suppliers are safeguarding systems and data.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
Cybercrime has become a well-organized business, complete with job specialization, funding, and online customer service. Dark Reading editors speak to cybercrime experts on the evolution of the cybercrime economy and the nature of today's attackers.