News & Commentary
Public Wi-Fi Use Grows, Despite Security Risks
Dark Reading Staff, Quick Hits
Survey says although 91% of the respondents admit that public Wi-Fi is insecure, 89% still use it.
By Dark Reading Staff , 10/18/2016
Comment0 comments  |  Read  |  Post a Comment
Cloud Security Replacing Cybersecurity Industry, Says Analyst
Dark Reading Staff, Quick Hits
UBS predicts flat corporate spending on IT as cloud computing service providers look set to take over cybersecurity customers.
By Dark Reading Staff , 10/17/2016
Comment0 comments  |  Read  |  Post a Comment
Executable Files, Old Exploit Kits Top Most Effective Attack Methods
Kelly Sheridan, Associate Editor, InformationWeekNews
Researchers for the new 'Hacker's Playbook' analyzed 4 million breach methods from an attacker's point of view to gauge the real risks today to enterprises.
By Kelly Sheridan Associate Editor, InformationWeek, 10/12/2016
Comment0 comments  |  Read  |  Post a Comment
Adware Campaign Using Advanced Nation-State Obfuscation Techniques
Ericka Chickowski, Contributing Writer, Dark ReadingNews
New report from Carbon Black shows adware may be spreading ransomware, using similar tactics as Operation Aurora.
By Ericka Chickowski Contributing Writer, Dark Reading, 9/26/2016
Comment0 comments  |  Read  |  Post a Comment
Spam Levels Spike, Thanks In Part To Ransomware
Sara Peters, Senior Editor at Dark ReadingNews
By shipping banking Trojans and ransomware that turn big profits fast, spammers can now afford the high overhead of high-volume spam campaigns.
By Sara Peters Senior Editor at Dark Reading, 9/23/2016
Comment0 comments  |  Read  |  Post a Comment
On-Premises & In The Cloud: Making Sense Of Your Cybersecurity Ecosystem
Yishai Beeri, Director of Cybersecurity Research, CloudLockCommentary
As enterprises continue to invest in hybrid cloud strategies, they need their fragmented security solutions to work together.
By Yishai Beeri Director of Cybersecurity Research, CloudLock, 9/23/2016
Comment0 comments  |  Read  |  Post a Comment
A Twist On The Cyber Kill Chain: Defending Against A JavaScript Malware Attack
Marc Laliberte, Information Security Threat Analyst, WatchGuard TechnologiesCommentary
This slightly modified model is a practical way to keep attackers out of your systems.
By Marc Laliberte Information Security Threat Analyst, WatchGuard Technologies, 9/21/2016
Comment0 comments  |  Read  |  Post a Comment
Keep It Simple: Security For A Complex Enterprise
Dark Reading Staff, CommentaryVideo
Michelle Cobb of Skybox Security talks to Dark Reading about security management.
By Dark Reading Staff , 9/14/2016
Comment0 comments  |  Read  |  Post a Comment
8 Security Categories Healthcare Providers Need to Improve On
Steve Zurier, Freelance Writer
A new survey by HIMSS finds that many providers dont even cover the basics of IT security.
By Steve Zurier Freelance Writer, 9/6/2016
Comment3 comments  |  Read  |  Post a Comment
The Secret Behind the NSA Breach: Network Infrastructure Is the Next Target
Yoni Allon, Research Team Leader, LightCyberCommentary
How the networking industry has fallen way behind in incorporating security measures to prevent exploits to ubiquitous routers, proxies, firewalls, and switches.
By Yoni Allon Research Team Leader, LightCyber, 8/25/2016
Comment1 Comment  |  Read  |  Post a Comment
User Ed: Patching People Vs Vulns
Lysa Myers, Security Researcher, ESETCommentary
How infosec can combine and adapt security education and security defenses to the way users actually do their jobs.
By Lysa Myers Security Researcher, ESET, 8/17/2016
Comment0 comments  |  Read  |  Post a Comment
Substantially Above Par: DR Cartoon Caption Contest Winners
Marilyn Cohodas, Community Editor, Dark ReadingCommentary
Critical vulnerabilities, links & virtual reality. And the winner is...
By Marilyn Cohodas Community Editor, Dark Reading, 8/12/2016
Comment0 comments  |  Read  |  Post a Comment
Data Protection From The Inside Out
Dan Frank, Deloitte Advisory Principal, Cyber Risk ServicesCommentary
Organizations must make fundamental changes in the way they approach data protection.
By Dan Frank Deloitte Advisory Principal, Cyber Risk Services, 8/8/2016
Comment1 Comment  |  Read  |  Post a Comment
Dark Reading News Desk Coming Back To Black Hat, Live
Sara Peters, Senior Editor at Dark ReadingNews
Live from Las Vegas: over 40 video interviews with Black Hat USA conference speakers and sponsors. Wednesday Aug. 3, Thursday Aug, 4, starting at 2 p.m. ET.
By Sara Peters Senior Editor at Dark Reading, 8/4/2016
Comment1 Comment  |  Read  |  Post a Comment
How To Stay Safe On The Black Hat Network: Dont Connect To It
Neil R. Wyler (Grifter), Threat Hunting and Incident Response Specialist, RSACommentary
Black Hat attendees may have changed their titles and now carry business cards but hackers gotta hack and theres no better place to do it than Black Hat.
By Neil R. Wyler (Grifter) Threat Hunting and Incident Response Specialist, RSA, 7/28/2016
Comment14 comments  |  Read  |  Post a Comment
Building Black Hat: Locking Down One Of The Worlds Biggest Security Conferences
Aamir Lakhani, Senior Security Strategist & Hacker, Fortinet, FortiGuard Advanced LabsCommentary
For security pros, being asked to help secure Black Hat is like being asked to play on the Olympic basketball team.
By Aamir Lakhani Senior Security Strategist & Hacker, Fortinet, FortiGuard Advanced Labs, 7/25/2016
Comment0 comments  |  Read  |  Post a Comment
7 Need-To-Know Attack Stats
Ericka Chickowski, Contributing Writer, Dark Reading
Facts & figures about average dwell times, incident response speeds, and which direction the 'detection deficit' is heading.
By Ericka Chickowski Contributing Writer, Dark Reading, 6/21/2016
Comment3 comments  |  Read  |  Post a Comment
Symantecs Purchase of Blue Coat Fills Critical Product Gap, Interim President Says
Jai Vijayan, Freelance writerNews
Combined business will have a product portfolio that is wide enough to address all threat vectors, Ajei Gopal says.
By Jai Vijayan Freelance writer, 6/16/2016
Comment0 comments  |  Read  |  Post a Comment
Cisco Invests $10 Million To Tackle Cybersecurity Talent Gap
Rutrell Yasin, Business Technology Writer, Tech Writers BureauNews
The companys Global Cybersecurity Scholarship program is looking to diversify the talent pool by working with veterans, women and those early in their careers.
By Rutrell Yasin Business Technology Writer, Tech Writers Bureau, 6/14/2016
Comment7 comments  |  Read  |  Post a Comment
Symantec To Spend $4.65 Billion On Blue Coat
Dark Reading Staff, Quick Hits
Deal will reportedly make company the worlds largest enterprise security business by revenues, but some in infosec industry are concerned.
By Dark Reading Staff , 6/14/2016
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
PR Newswire
Register for Dark Reading Newsletters
White Papers
Current Issue
Five Emerging Security Threats - And What You Can Learn From Them
At Black Hat USA, researchers unveiled some nasty vulnerabilities. Is your organization ready?
Flash Poll
Title Partners Role in Perimeter Security
Title Partners Role in Perimeter Security
Considering how prevalent third-party attacks are, we need to ask hard questions about how partners and suppliers are safeguarding systems and data.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
According to industry estimates, about a million new IT security jobs will be created in the next two years but there aren't enough skilled professionals to fill them. On top of that, there isn't necessarily a clear path to a career in security. Dark Reading Executive Editor Kelly Jackson Higgins hosts guests Carson Sweet, co-founder and CTO of CloudPassage, which published a shocking study of the security gap in top US undergrad computer science programs, and Rodney Petersen, head of NIST's new National Initiative for Cybersecurity Education.