Perimeter
3/13/2011
05:14 PM
Tim Wilson
Tim Wilson
Commentary
Connect Directly
RSS
E-Mail
50%
50%

Dark Reading Launches New Tech Center On Advanced Threats

New subsite will offer more in-depth news coverage, analysis on next-generation threats

Today Dark Reading launches a new feature: the Advanced Threats Tech Center, a subsite of Dark Reading devoted to bringing you more detailed news, insight, and in-depth reporting on next-generation threats and exploits.

This is the eighth of our Dark Reading Tech Centers, which are designed to provide you with a more focused view of specific issues, threats, and technologies in the world of IT security. The Tech Centers offer in-depth reports and studies, breaking news, and links to additional articles and information not found on the main Dark Reading site. Just as a traditional newspaper offers in-depth sections or supplements on sports, entertainment, or politics, the Dark Reading Tech Centers provide an additional range of news and information for readers who have an interest in specific aspects of IT security.

While Dark Reading is always covering the latest attacks and vulnerabilities found by security researchers, we have not previously had a space dedicated to the "deep dive" analysis of threats that is required by so many security professionals. With the introduction of the Advanced Threats Tech Center, we will have the space and resources to do more technical analyses of the newest and most sophisticated exploits, and the most effective methods or responding to them.

With this charter in mind, you can expect the Advanced Threats Tech Center to take a slightly different perspective than the rest of the Dark Reading site -- it will offer technical details on new threats that might not be found in our breaking news stories, and deeper insight on the risks associated with the latest exploits. You'll get a closer look at how new exploits really work -- and what damage they may cause.

The goal of the Advanced Threats Tech Center is to help you make informed decisions about the latest sophisticated threats and zero-day vulnerabilities, helping you to gauge the seriousness of the threat to your organization and how to respond. In some cases, we'll discuss patches and workarounds that may help you protect your enterprise’s data from these new threats. And of course, we'll keep you abreast of attack trends and new classes of threats that may necessitate changes in your defense strategy.

Of course, the creation of the Advanced Threats Tech Center doesn't mean that our coverage of breaking news of emerging threats on the main Dark Reading site will decrease. You'll continue to see news and analysis of new exploits on our home page, and next-generation threats will remain a topic of discussion for our bloggers and on our message boards. But when you click on those stories or blogs, you'll be brought here, to the Tech Center, so that you can see the full range and depth of analysis that we offer on the topic, and gain additional context to support what you're reading.

We think the Advanced Threats Tech Center will help you understand the security challenges that your organization may face, and make good decisions about the tools and practices that might work best. But in the end, this is your site. Please let us know what you think of the Tech Center, our coverage of new threats, and what you'd like to see us cover in more depth. We can't guarantee we'll answer every query with a story or in-depth report, but we'll do our best to meet your needs for additional information and analysis.

If it has to do with new and highly sophisticated security exploits, you'll find it here. And if you don't, let us know -- our goal is to be the most comprehensive source of security vulnerability and threat news and information on the Web.

-- Tim Wilson, Editor, Dark Reading

Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-3345
Published: 2014-08-28
The web framework in Cisco Transport Gateway for Smart Call Home (aka TG-SCH or Transport Gateway Installation Software) 4.0 does not properly check authorization for administrative web pages, which allows remote attackers to modify the product via a crafted URL, aka Bug ID CSCuq31503.

CVE-2014-3347
Published: 2014-08-28
Cisco IOS 15.1(4)M2 on Cisco 1800 ISR devices, when the ISDN Basic Rate Interface is enabled, allows remote attackers to cause a denial of service (device hang) by leveraging knowledge of the ISDN phone number to trigger an interrupt timer collision during entropy collection, leading to an invalid s...

CVE-2014-4199
Published: 2014-08-28
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, allows local users to write to arbitrary files via a symlink attack on a file in /tmp.

CVE-2014-4200
Published: 2014-08-28
vm-support 0.88 in VMware Tools, as distributed with VMware Workstation through 10.0.3 and other products, uses 0644 permissions for the vm-support archive, which allows local users to obtain sensitive information by extracting files from this archive.

CVE-2014-0761
Published: 2014-08-27
The DNP3 driver in CG Automation ePAQ-9410 Substation Gateway allows remote attackers to cause a denial of service (infinite loop or process crash) via a crafted TCP packet.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.