Risk
11/7/2006
02:03 AM
Connect Directly
RSS
E-Mail
50%
50%
Repost This

Mark Fabro Joins Lofty Perch

Lofty Perch announced the appointment of Mark Fabro as Chief Security Scientist and VP Professional Services

TORONTO -- Lofty Perch Inc announced today the appointment of Mark Fabro as Chief Security Scientist and VP Professional Services. A recognized expert in cyber-security and critical infrastructure protection (CIP), Mr. Fabro brings almost 20 years of experience to the security services team at Lofty Perch. Prior to Lofty Perch, Mr. Fabro led National Security and CIP initiatives at BearingPoint's Security and Identity Management practice, and was recently recognized as one of Consulting Magazine's 'Most Influential Consultants in the World' for his work in cyber-security and infrastructure protection. He chairs many US, Canadian and international working groups on Critical Infrastructure Protection, control system and SCADA cyber-security, and national security initiatives related to information assurance.

Howard Schmidt, former White House Chair of the Presidents Critical Infrastructure Protection Board and author of the soon to be released book 'Patrolling Cyberspace', says that he sees this addition as a strong move by Lofty Perch. "The need for expertise and practical solutions to counter the risks of cyber attack on control systems and key infrastructure assets is extremely high. Lofty Perch has done well to be able to bring in as qualified a figure as Mark Fabro to their team, at a time when high-level competence like Mark's is a very rare commodity anywhere in the world."

Lofty Perch Inc.

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Flash Poll
Current Issue
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-5704
Published: 2014-04-15
The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent with chunked transfer coding. NOTE: the vendor states "this is not a security issue in httpd as such."

CVE-2013-5705
Published: 2014-04-15
apache2/modsecurity.c in ModSecurity before 2.7.6 allows remote attackers to bypass rules by using chunked transfer coding with a capitalized Chunked value in the Transfer-Encoding HTTP header.

CVE-2014-0341
Published: 2014-04-15
Multiple cross-site scripting (XSS) vulnerabilities in PivotX before 2.3.9 allow remote authenticated users to inject arbitrary web script or HTML via the title field to (1) templates_internal/pages.tpl, (2) templates_internal/home.tpl, or (3) templates_internal/entries.tpl; (4) an event field to ob...

CVE-2014-0342
Published: 2014-04-15
Multiple unrestricted file upload vulnerabilities in fileupload.php in PivotX before 2.3.9 allow remote authenticated users to execute arbitrary PHP code by uploading a file with a (1) .php or (2) .php# extension, and then accessing it via unspecified vectors.

CVE-2014-0348
Published: 2014-04-15
The Artiva Agency Single Sign-On (SSO) implementation in Artiva Workstation 1.3.x before 1.3.9, Artiva Rm 3.1 MR7, Artiva Healthcare 5.2 MR5, and Artiva Architect 3.2 MR5, when the domain-name option is enabled, allows remote attackers to login to arbitrary domain accounts by using the corresponding...

Best of the Web