Risk
11/7/2006
02:03 AM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Mark Fabro Joins Lofty Perch

Lofty Perch announced the appointment of Mark Fabro as Chief Security Scientist and VP Professional Services

TORONTO -- Lofty Perch Inc announced today the appointment of Mark Fabro as Chief Security Scientist and VP Professional Services. A recognized expert in cyber-security and critical infrastructure protection (CIP), Mr. Fabro brings almost 20 years of experience to the security services team at Lofty Perch. Prior to Lofty Perch, Mr. Fabro led National Security and CIP initiatives at BearingPoint's Security and Identity Management practice, and was recently recognized as one of Consulting Magazine's 'Most Influential Consultants in the World' for his work in cyber-security and infrastructure protection. He chairs many US, Canadian and international working groups on Critical Infrastructure Protection, control system and SCADA cyber-security, and national security initiatives related to information assurance.

Howard Schmidt, former White House Chair of the Presidents Critical Infrastructure Protection Board and author of the soon to be released book 'Patrolling Cyberspace', says that he sees this addition as a strong move by Lofty Perch. "The need for expertise and practical solutions to counter the risks of cyber attack on control systems and key infrastructure assets is extremely high. Lofty Perch has done well to be able to bring in as qualified a figure as Mark Fabro to their team, at a time when high-level competence like Mark's is a very rare commodity anywhere in the world."

Lofty Perch Inc.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-3946
Published: 2014-04-24
Cisco IOS before 15.3(2)S allows remote attackers to bypass interface ACL restrictions in opportunistic circumstances by sending IPv6 packets in an unspecified scenario in which expected packet drops do not occur for "a small percentage" of the packets, aka Bug ID CSCty73682.

CVE-2012-5723
Published: 2014-04-24
Cisco ASR 1000 devices with software before 3.8S, when BDI routing is enabled, allow remote attackers to cause a denial of service (device reload) via crafted (1) broadcast or (2) multicast ICMP packets with fragmentation, aka Bug ID CSCub55948.

CVE-2013-6738
Published: 2014-04-24
Cross-site scripting (XSS) vulnerability in IBM SmartCloud Analytics Log Analysis 1.1 and 1.2 before 1.2.0.0-CSI-SCALA-IF0003 allows remote attackers to inject arbitrary web script or HTML via an invalid query parameter in a response from an OAuth authorization endpoint.

CVE-2014-0188
Published: 2014-04-24
The openshift-origin-broker in Red Hat OpenShift Enterprise 2.0.5, 1.2.7, and earlier does not properly handle authentication requests from the remote-user auth plugin, which allows remote attackers to bypass authentication and impersonate arbitrary users via the X-Remote-User header in a request to...

CVE-2014-2391
Published: 2014-04-24
The password recovery service in Open-Xchange AppSuite before 7.2.2-rev20, 7.4.1 before 7.4.1-rev11, and 7.4.2 before 7.4.2-rev13 makes an improper decision about the sensitivity of a string representing a previously used but currently invalid password, which allows remote attackers to obtain potent...

Best of the Web