Threat Intelligence
News & Commentary
How to Roll Your Own Threat Intelligence Team
Adam Meyers, VP of Intelligence, CrowdStrikeCommentary
A lot of hard work needs to go into effectively implementing an intelligence-driven security model. It starts with five critical factors.
By Adam Meyers VP of Intelligence, CrowdStrike, 7/29/2016
Comment1 Comment  |  Read  |  Post a Comment
Legal Sector's Threat Intel-Sharing Group Grows
Dark Reading Staff, Quick Hits
Dark Reading News Desk Coming Back To Black Hat, Live
Sara Peters, Senior Editor at Dark ReadingNews
Live from Las Vegas: 40 video interviews with Black Hat USA conference speakers and sponsors. Wednesday Aug. 3, Thursday Aug, 4, 2 p.m. - 6:10 p.m. ET.
By Sara Peters Senior Editor at Dark Reading, 7/27/2016
Comment0 comments  |  Read  |  Post a Comment
How Jihadists Operate Online And Under The Radar: Report
Jai Vijayan, Freelance writerNews
Secure browsers, VPNs, protected email apps, and mobile security apps are just tip of iceberg, Flashpoint report shows.
By Jai Vijayan Freelance writer, 7/22/2016
Comment7 comments  |  Read  |  Post a Comment
Tools & Training To ‘Hack Yourself’ Into Better Security
Ofer Israeli, Founder & VP, R&D, illusive networksCommentary
How to teach your blue team to think like the red team when your network is under attack and time is your most valuable asset.
By Ofer Israeli Founder & VP, R&D, illusive networks, 7/21/2016
Comment3 comments  |  Read  |  Post a Comment
Improving Attribution & Malware Identification With Machine Learning
Sara Peters, Senior Editor at Dark ReadingNews
New technique may be able to predict not only whether unfamiliar, unknown code is malicious, but also what family it is and who it came from.
By Sara Peters Senior Editor at Dark Reading, 7/20/2016
Comment0 comments  |  Read  |  Post a Comment
UK Rail Hit By Four Cyberattacks In One Year
Dark Reading Staff, Quick Hits
No disruption to rail network caused, hackers appear to be nation-states, says cybersecurity firm Darktrace.
By Dark Reading Staff , 7/18/2016
Comment0 comments  |  Read  |  Post a Comment
Meet The Teams In DARPA's All-Machine Hacking Tournament
Steve Zurier, Freelance Writer
"Autonomous security" is DARPA's latest game. Its Cyber Grand Challenge will culminate at DEF CON with a contest to see which of these seven finalists' machines will automatically detect and remediate the most security vulnerabilities.
By Steve Zurier Freelance Writer, 7/15/2016
Comment1 Comment  |  Read  |  Post a Comment
What's Next For Canada’s Surveillance Landscape?
Bruce Cowper, SecTor Co-FounderCommentary
Edward Snowden headlines SecTor security conference as Canadian privacy advocates await the Trudeau government’s next move in the country’s complex privacy and security debate.
By Bruce Cowper SecTor Co-Founder, 7/14/2016
Comment0 comments  |  Read  |  Post a Comment
FDIC Likely Hacked By China But Covered Up Breach, Report Says
Dark Reading Staff, Quick Hits
A 2013 FDIC internal memo indicates a cover-up of China breach by employees to protect chairman’s job.
By Dark Reading Staff , 7/14/2016
Comment0 comments  |  Read  |  Post a Comment
Context-Rich And Context-Aware Cybersecurity
Ned Miller, Intel Security, Chief Technology Strategist for Public Sector
An adaptive threat-prevention model is quickly replacing traditional, unintegrated architectures as security teams work to achieve a sustainable advantage against complex threats.
By Ned Miller Intel Security, Chief Technology Strategist for Public Sector, 7/14/2016
Comment1 Comment  |  Read  |  Post a Comment
Purple Teaming: Red & Blue Living Together, Mass Hysteria
Sara Peters, Senior Editor at Dark ReadingNews
When you set focused objectives for the red team, you get your blue team to work the weak muscles they need trained most.
By Sara Peters Senior Editor at Dark Reading, 7/13/2016
Comment1 Comment  |  Read  |  Post a Comment
What I Expect to See At Black Hat 2016: 5 Themes
Chris Wysopal, CTO, CISO and co-founder, VeracodeCommentary
Over the years, Black Hat has morphed from a little show for security researchers to a big conference that attracts everyone from black-hat hackers to C-level security execs. Here’s what piques my interest this year.
By Chris Wysopal CTO, CISO and co-founder, Veracode, 7/13/2016
Comment1 Comment  |  Read  |  Post a Comment
Profiles Of The Top 7 Bug Hunters From Around the Globe
Sean Martin, CISSP | President, imsmartin
'Super hunters' share a common goal: to find the most high impact valid bugs before a bad guy does.
By Sean Martin CISSP | President, imsmartin, 7/12/2016
Comment0 comments  |  Read  |  Post a Comment
New ‘Ranscam’ Ransomware Lowers The Bar But Raises The Stakes
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Cisco Talos researchers discover new variant that doesn't decrypt your files after you pay up--it has already deleted them.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 7/11/2016
Comment2 comments  |  Read  |  Post a Comment
Does Defense In Depth Still Work Against Today’s Cyber Threats?
Frank Mong, Senior VP, Product, Industry & Solutions Marketing, Palo Alto NetworksCommentary
Yes. But not for much longer unless the industry shifts to an automated security and zero trust model.
By Frank Mong Senior VP, Product, Industry & Solutions Marketing, Palo Alto Networks, 7/11/2016
Comment1 Comment  |  Read  |  Post a Comment
8 Ways Ethically Compromised Employees Compromise Security
Ericka Chickowski, Contributing Writer, Dark Reading
From audit cheats to bringing data to a new job, unscrupulous employees put organizations at risk.
By Ericka Chickowski Contributing Writer, Dark Reading, 7/10/2016
Comment1 Comment  |  Read  |  Post a Comment
Cybercrime Now Surpasses Traditional Crime In UK
Rutrell Yasin, Freelance WriterNews
The US could be on an even worse trajectory, according to one security expert.
By Rutrell Yasin Freelance Writer, 7/8/2016
Comment0 comments  |  Read  |  Post a Comment
NATO Ambassador: How The Ukraine Crisis Fits Cyber War Narrative
Sara Peters, Senior Editor at Dark ReadingNews
Kenneth Geers previews his Black Hat talk and discusses the strategic military maneuvers governments can make within cyberspace.
By Sara Peters Senior Editor at Dark Reading, 7/7/2016
Comment1 Comment  |  Read  |  Post a Comment
Government Should Publicly ID Cyberattackers, Ex-US Intel Chief Says
Dark Reading Staff, Quick Hits
Michael Rogers believes acknowledgement will help insurance companies defend against lawsuits.
By Dark Reading Staff , 7/7/2016
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: You should see what I wear on my work from home days!
Current Issue
The Changing Face of Identity Management
Mobility and cloud services are altering the concept of user identity. Here are some ways to keep up.
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-7445
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

CVE-2015-4948
Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

CVE-2015-5660
Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

CVE-2015-6003
Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

CVE-2015-6333
Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio

The cybersecurity profession struggles to retain women (figures range from 10 to 20 percent). It's particularly worrisome for an industry with a rapidly growing number of vacant positions.

So why does the shortage of women continue to be worse in security than in other IT sectors? How can men in infosec be better allies for women; and how can women be better allies for one another? What is the industry doing to fix the problem -- what's working, and what isn't?

Is this really a problem at all? Are the low numbers simply an indication that women do not want to be in cybersecurity, and is it possible that more women will never want to be in cybersecurity? How many women would we need to see in the industry to declare success?

Join Dark Reading senior editor Sara Peters and guests Angela Knox of Cloudmark, Barrett Sellers of Arbor Networks, Regina Wallace-Jones of Facebook, Steve Christey Coley of MITRE, and Chris Roosenraad of M3AAWG on Wednesday, July 13 at 1 p.m. Eastern Time to discuss all this and more.