Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Risk
News & Commentary
Decrypting The Dark Web: Patterns Inside Hacker Forum Activity
Kelly Sheridan, Associate Editor, InformationWeekNews
Data analysis to be presented at Black Hat Europe highlights trends in communication between bad actors who gather in underground forums across the Dark Web.
By Kelly Sheridan Associate Editor, InformationWeek, 9/29/2016
Comment0 comments  |  Read  |  Post a Comment
Hacking The Polls: Where US Voting Processes Fall Short
Jeff Schilling, Chief of Operations and Security, ArmorCommentary
The patchwork of 50 decentralized state electoral systems threatens to disrupt our national election through ransomware attacks, hijacked voter registration rolls, and altered voting results.
By Jeff Schilling Chief of Operations and Security, Armor, 9/28/2016
Comment5 comments  |  Read  |  Post a Comment
SWIFT Toughens Customer Security With New Mandatory Rules
Dark Reading Staff, Quick Hits
Measures to include set of core safety standards and assurance framework requiring annual self-attestation by SWIFT members.
By Dark Reading Staff , 9/28/2016
Comment0 comments  |  Read  |  Post a Comment
Improving The Security Conversation For CIOs, CISOs, & Board Members
Kelly Sheridan, Associate Editor, InformationWeekNews
Cybersecurity is a top priority among enterprise leaders, but it's difficult for them to communicate with IT and security teams if they lack an understanding of key security concepts.
By Kelly Sheridan Associate Editor, InformationWeek, 9/28/2016
Comment0 comments  |  Read  |  Post a Comment
5 Best Practices For Winning the IoT Security Arms Race
Mark Benson & Brian Ericson, Exosite CTO & Software EngineerCommentary
By focusing on a pragmatic approach to security, it’s possible to develop IoT solutions that will reduce future risk without breaking the bank.
By Mark Benson, CTO, and Brian Ericson, , 9/27/2016
Comment0 comments  |  Read  |  Post a Comment
Yahoo Breach: US Senator Seeks SEC Role In Probe
Dark Reading Staff, Quick Hits
Democrat Mark Warner asks US Securities and Exchange Commission to investigate whether Yahoo completed obligations post breach discovery.
By Dark Reading Staff , 9/27/2016
Comment0 comments  |  Read  |  Post a Comment
Mobile Fraud Changes Outlook for Multifactor Authentication
Stephen Maloney, Executive VP, Business Development & Strategy, AcuantCommentary
SMS one-time passcodes just won't cut it anymore. We need new approaches that people will actually use.
By Steve Maloney , 9/27/2016
Comment0 comments  |  Read  |  Post a Comment
Cyber Risk Among Top Concerns For Business Leaders: Study
Kelly Sheridan, Associate Editor, InformationWeekNews
More than 50% of business leaders surveyed in the Travelers Risk Index report cyber, computer, and technology risks are among their top concerns.
By Kelly Sheridan Associate Editor, InformationWeek, 9/26/2016
Comment0 comments  |  Read  |  Post a Comment
Advisory Body Calls For Stronger Cybersecurity Measures Across Airline Industry
Jai Vijayan, Freelance writerNews
Measures are designed to bolster operational security across all stakeholders in the aviation sector, Wall Street Journal says.
By Jai Vijayan Freelance writer, 9/23/2016
Comment0 comments  |  Read  |  Post a Comment
Top Democrats Tell Putin To Halt Hacking Of US Political Parties
Dark Reading Staff, Quick Hits
Russia trying to influence November presidential elections, say Senator Dianne Feinstein and Rep. Adam Schiff.
By Dark Reading Staff , 9/23/2016
Comment7 comments  |  Read  |  Post a Comment
Snowden: Hollywood Highlights 2 Persistent Privacy Threats
Will Ackerly, Co-Founder & CTO, VirtruCommentary
Oliver Stone’s movie shows us that while most of us have nothing to hide, we all have information worth protecting – both technically and constitutionally.
By Will Ackerly Co-Founder & CTO, Virtru, 9/22/2016
Comment11 comments  |  Read  |  Post a Comment
10 Ways To Lock Down Third-Party Risk
Steve Zurier, Freelance Writer
Experts share ideas for closing potential security holes that leave organizations open to attack.
By Steve Zurier Freelance Writer, 9/22/2016
Comment1 Comment  |  Read  |  Post a Comment
Rand Study: Average Data Breach Costs $200K, Not Millions
Terry Sweeney, Contributing EditorNews
Rand taps multiple data sources to calculate that cyber incidents cost firms a scant 0.4% of annual revenues, on average.
By Terry Sweeney Contributing Editor, 9/21/2016
Comment2 comments  |  Read  |  Post a Comment
Chinese Researchers Hack Tesla S Models, Expose Bugs
Dark Reading Staff, Quick Hits
Automaker fixes security risks after Tencent Holdings uncover vulnerabilities in both parking and drive mode.
By Dark Reading Staff , 9/21/2016
Comment1 Comment  |  Read  |  Post a Comment
Lack Of Funding Stymies State CISOs
Rutrell Yasin, Freelance WriterNews
Governors, other state officials more aware of cyber threats, but confidence gap exists between IT and business managers, new Deloitte-National State Chief Information Officers (NASCIO) study finds.
By Rutrell Yasin Freelance Writer, 9/20/2016
Comment6 comments  |  Read  |  Post a Comment
Hacking 'Forward’ With Weaponized Intelligence
Danelle Au, VP Strategy, SafeBreachCommentary
Instead of hacking back and taking the fight to your adversary, what if your organization hacked forward by unearthing breach scenarios before the hackers do?
By Danelle Au VP Strategy, SafeBreach, 9/20/2016
Comment2 comments  |  Read  |  Post a Comment
2016 On Track To See Over 1 Billion Records Breached
Ericka Chickowski, Contributing Writer, Dark ReadingNews
New report shows first half breach statistics put organizations on pace to beat last year's breach numbers by a wide margin.
By Ericka Chickowski Contributing Writer, Dark Reading, 9/20/2016
Comment0 comments  |  Read  |  Post a Comment
Top Colleges For Cybersecurity
Ericka Chickowski, Contributing Writer, Dark Reading
Check out these respected post-secondary U.S. cybersecurity education programs at both undergraduate and graduate levels.
By Ericka Chickowski Contributing Writer, Dark Reading, 9/19/2016
Comment3 comments  |  Read  |  Post a Comment
FBI May Seek Legal Action Against Russian Hackers
Dark Reading Staff, Quick Hits
US government under pressure to take action against cyberattackers believed to be part of Russian intelligence groups, say sources.
By Dark Reading Staff , 9/19/2016
Comment0 comments  |  Read  |  Post a Comment
Uber, Dropbox, Other Tech Leaders Team Up To Boost Vendor Security
Kelly Sheridan, Associate Editor, InformationWeekNews
Tech companies - including Uber, Dropbox, Twitter, and Docker - have joined forces to create the Vendor Security Alliance, which aims to vet vendor security practices.
By Kelly Sheridan Associate Editor, InformationWeek, 9/16/2016
Comment1 Comment  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
Optiv Security Launches Technology-Enabled Third-Party Risk Managed Service
New report: 12 hot markets for cybersecurity jobs
Bay Dynamics Announces Major Enhancements to Flagship Cyber Risk Analytics Platform
Vectra Networks Takes On Backdoors in Data Center Firewalls Planted by Advanced Adversaries
Indegy Lands $12M in Series A Financing to Protect Critical Infrastructures from Cyber Threats
Third-Party Cyber Risk Management Platform Company CyberGRX Closes $9M Series A Funding
67 Percent of Used Drives Sold on eBay and Craigslist Hold Personally Identifiable Information and 11 Percent Contain Sensitive Corporate Data
LockPath Included as a Visionary in Gartner’s 2016 Magic Quadrant for IT Risk Management Solutions
More Products & Releases
PR Newswire
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Bird watching used to be a thing, but live tweeting changed everything
Current Issue
Five Emerging Security Threats - And What You Can Learn From Them
At Black Hat USA, researchers unveiled some nasty vulnerabilities. Is your organization ready?
Flash Poll
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
Cybercrime has become a well-organized business, complete with job specialization, funding, and online customer service. Dark Reading editors speak to cybercrime experts on the evolution of the cybercrime economy and the nature of today's attackers.