Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management

Risk

News & Commentary
Congressional Report Cites States Most Vulnerable to Election Hacking
Dark Reading Staff, Quick Hits
A new report details issues with 18 states along with suggestions on what can be done.
By Dark Reading Staff , 7/13/2018
Comment0 comments  |  Read  |  Post a Comment
Newly Found Spectre Variants Bring New Concerns
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
Two new variants on a theme of Spectre underscore the expanding nature of the critical vulnerabilities.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 7/11/2018
Comment0 comments  |  Read  |  Post a Comment
What We Talk About When We Talk About Risk
Jack Jones, Chairman, FAIR InstituteCommentary
Measuring security risk is not that hard if you get your terms straight and leverage well-established methods and principles from other disciplines.
By Jack Jones Chairman, FAIR Institute, 7/11/2018
Comment3 comments  |  Read  |  Post a Comment
Microsoft July Security Updates Mostly Browser-Related
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Patch Tuesday includes 53 security updates, including mitigation for the latest side-channel attack.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 7/10/2018
Comment0 comments  |  Read  |  Post a Comment
Businesses Struggle to Build 'Security-First' Culture
Kelly Sheridan, Staff Editor, Dark ReadingNews
New Accenture study finds half of businesses provide cybersecurity training for new hires and only 40% of CISOs prioritize building or expanding insider threat programs.
By Kelly Sheridan Staff Editor, Dark Reading, 7/10/2018
Comment0 comments  |  Read  |  Post a Comment
Putin Pushes for Global Cybersecurity Cooperation
Dark Reading Staff, Quick Hits
At a Moscow-based security conference, Russian President Vladimir Putin said countries should work together amid the rise of cyberthreats.
By Dark Reading Staff , 7/6/2018
Comment2 comments  |  Read  |  Post a Comment
New Malware Variant Hits With Ransomware or Cryptomining
Dark Reading Staff, Quick Hits
A new variant of old malware scans a system before deciding just how to administer pain.
By Dark Reading Staff , 7/5/2018
Comment0 comments  |  Read  |  Post a Comment
UK Banks Must Produce Backup Plans for Cyberattacks
Dark Reading Staff, Quick Hits
Financial services firms in Britain have three months to explain how they would stay up and running in the event of an attack or service disruption.
By Dark Reading Staff , 7/5/2018
Comment3 comments  |  Read  |  Post a Comment
Ransomware vs. Cryptojacking
Jay Kelley, Senior Product & Digital Marketing Manager, Menlo Security, Inc. Commentary
Cybercriminals are increasingly turning to cryptojacking over ransomware for a bigger payday. Here's what enterprises need to know in order to protect their digital assets and bank accounts.
By Jay Kelley Senior Product & Digital Marketing Manager, Menlo Security, Inc. , 7/3/2018
Comment0 comments  |  Read  |  Post a Comment
6 Drivers of Mental and Emotional Stress in Infosec
Kelly Sheridan, Staff Editor, Dark Reading
Pressure comes in many forms but often with the same end result: stress and burnout within the security community.
By Kelly Sheridan Staff Editor, Dark Reading, 7/2/2018
Comment3 comments  |  Read  |  Post a Comment
There's No Automating Your Way Out of Security Hiring Woes
Ericka Chickowski, Contributing Writer, Dark ReadingNews
Call it the paradox of cybersecurity automation: It makes your staff more productive but takes more quality experts to make it work.
By Ericka Chickowski Contributing Writer, Dark Reading, 6/28/2018
Comment0 comments  |  Read  |  Post a Comment
65% of Resold Memory Cards Still Pack Personal Data
Kelly Sheridan, Staff Editor, Dark ReadingNews
Analyzed cards, mainly from smartphones and tablets, contained private personal information, business documentation, audio, video, and photos.
By Kelly Sheridan Staff Editor, Dark Reading, 6/28/2018
Comment1 Comment  |  Read  |  Post a Comment
Ticketmaster UK Warns Thousands of Data Breach
Dark Reading Staff, Quick Hits
Customers who bought tickets through the site are advised to check for fraudulent transactions with Uber, Netflix, and Xendpay.
By Dark Reading Staff , 6/28/2018
Comment8 comments  |  Read  |  Post a Comment
Redefining Security with Blockchain
Stan Black, CSIO, CitrixCommentary
Blockchain offers a proactive approach to secure a new generation of digital platforms and services for both enterprises and individuals.
By Stan Black CSIO, Citrix, 6/28/2018
Comment1 Comment  |  Read  |  Post a Comment
Today! 'Why Cybercriminals Attack,' A Dark Reading Virtual Event
Dark Reading Staff, Commentary
Wednesday, June 27, this all-day event starting at 11 a.m. ET, will help you decide who and what you really need to defend against, and how to do it more effectively.
By Dark Reading Staff , 6/27/2018
Comment3 comments  |  Read  |  Post a Comment
Insider Dangers Are Hiding in Collaboration Tools
Ericka Chickowski, Contributing Writer, Dark ReadingNews
The casual sharing of sensitive data, such as passwords, is opening the door to malicious insiders.
By Ericka Chickowski Contributing Writer, Dark Reading, 6/26/2018
Comment14 comments  |  Read  |  Post a Comment
US Announces Arrests in Ghanian Fraud Schemes
Dark Reading Staff, Quick Hits
Eight individuals in the US and Ghana are charged with stealing more than $15 million through computer-based fraud.
By Dark Reading Staff , 6/26/2018
Comment1 Comment  |  Read  |  Post a Comment
Secure by Default Is Not What You Think
Tom Thomassen, Senior Staff Engineer of Security, MarkLogicCommentary
The traditional view of secure by default — which has largely been secure out of the box — is too narrow. To broaden your view, consider these three parameters.
By Tom Thomassen Senior Staff Engineer of Security, MarkLogic, 6/26/2018
Comment0 comments  |  Read  |  Post a Comment
Black Hat Survey: Enterprise Tech, US Government Unprepared for Cyberattacks
Kelly Sheridan, Staff Editor, Dark ReadingNews
The 2018 Black Hat Attendee survey reveals worries over the effectiveness of enterprise security technology, and threat to US infrastructure.
By Kelly Sheridan Staff Editor, Dark Reading, 6/26/2018
Comment3 comments  |  Read  |  Post a Comment
Midsized Organizations More Secure Than Large Ones
Ericka Chickowski, Contributing Writer, Dark ReadingNews
New report offers data and analysis as to why midsized organizations hit a cybersecurity sweet spot in terms of security efficacy.
By Ericka Chickowski Contributing Writer, Dark Reading, 6/25/2018
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
Jumio’s Netverify® Solutions Win Gold and Bronze in Security Software
ISACA and SecurityScorecard Define Questions to Implement Continuous Assurance for Data
BitSight Raises $60 Million in Series D Funding Led by Warburg Pincus
Trillium Opens Michigan Cybersecurity Operations and R&D Center
68% of EU, US Crypto Exchanges and Wallets Fail on Proper Customer Identity Checks
Cybersecurity, IT Governance, Emerging Tech Shaping 2018 IT Audit Plans: Protiviti, ISACA
ISACA Unveils GDPR Assessment for Enterprises to Gauge Regulation Readiness and Compliance Path
Tax Software Providers Not Protecting Emails from Phishing and Spoofing
More Products & Releases
PR Newswire
What We Talk About When We Talk About Risk
Jack Jones, Chairman, FAIR Institute,  7/11/2018
Ticketmaster Breach Part of Massive Payment Card Hacking Campaign
Jai Vijayan, Freelance writer,  7/10/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-14084
PUBLISHED: 2018-07-16
An issue was discovered in a smart contract implementation for MKCB, an Ethereum token. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell().
CVE-2018-14085
PUBLISHED: 2018-07-16
An issue was discovered in a smart contract implementation for UserWallet 0x0a7bca9FB7AfF26c6ED8029BB6f0F5D291587c42, an Ethereum token. First, suppose that the owner adds the evil contract address to his sweepers. The evil contract looks like this: contract Exploit { uint public start; function swe...
CVE-2018-14086
PUBLISHED: 2018-07-16
An issue was discovered in a smart contract implementation for SingaporeCoinOrigin (SCO), an Ethereum token. The contract has an integer overflow. If the owner sets the value of sellPrice to a large number in setPrices() then the "amount * sellPrice" will cause an integer overflow in sell(...
CVE-2018-14087
PUBLISHED: 2018-07-16
An issue was discovered in a smart contract implementation for EUC (EUC), an Ethereum token. The contract has an integer overflow. If the owner sets the value of buyPrice to a large number in setPrices() then the "msg.value * buyPrice" will cause an integer overflow in the fallback functio...
CVE-2018-14088
PUBLISHED: 2018-07-16
An issue was discovered in a smart contract implementation for STeX White List (STE(WL)), an Ethereum token. The contract has an integer overflow. If the owner sets the value of amount to a large number then the "amount * 1000000000000000" will cause an integer overflow in withdrawToFounde...