Vulnerabilities / Threats
5/1/2013
01:05 PM
Tim Wilson
Tim Wilson
Commentary
50%
50%

Dark Reading's Seven-Year Itch

After seven years of covering the security industry, Dark Reading is just getting started

Seven years ago today, Dark Reading made its first appearance on the Web. The publication, like the security industry itself, has changed a great deal since May 1, 2006 -- and yet, as with the industry, many core themes remain constant.

When we launched Dark Reading, our goal was to build a single website where security professionals could go to find all of the information they needed about new threats and methods for stopping them.

In those days, nobody was talking about the cloud or advanced persistent threats or bring your own device. One of the biggest breaches that year was at the Department of Veterans Affairs, where an employee brought work home on a laptop that was subsequently stolen. One of our most popular stories was a penetration test by blogger Steve Stasiukonis, who put a benign infection on a bunch of thumb drives and placed them all over a company headquarters site (almost all of them were plugged into company computers).

Over the years, businesses have been inundated with new attacks ranging from Stuxnet to Storm, from Anonymous to Zeus. And yet, those lost laptops and infected thumb drives continue to be a problem for most enterprises.

In 2006, we were writing about the features of antivirus and IPS products, noting their particular flaws and inability to prevent attacks from penetrating. The integrity of the security perimeter was at risk.

Since then, we've seen the launch of a wide range of technologies and strategies, from next-generation firewalls to data leak prevention to threat intelligence services. And yet, experts are still complaining about the failure of AV technology, and most have all but given up the idea of maintaining a secure perimeter.

Perhaps the lesson we're taught from the past seven years is that while attacks and technology change, the nature of security itself doesn't. We may be dealing with an unprecedented volume and sophistication of malware, but that doesn't change the fact that humans are at the heart of most of our defenses -- and most of our compromises. And security, like everything else that's human, is a work in progress.

For Dark Reading's part, our pledge is to continue to strive to be that single source of news and information that you need in your efforts as a security professional. We've taken some steps recently to improve our content, such as the redesign launched in April, and we have more plans in store for improving the usefulness and interactivity of the site. We have an itch to take this site to a new level, and we look forward to the days ahead.

And for those of you who have been reading us over these past seven years, thank you. We hope we'll continue to be one of your primary sites for security news and information for another seven years -- and beyond.

--Tim Wilson, Kelly Jackson Higgins, and the staff and contributors of Dark Reading Tim Wilson is Editor in Chief and co-founder of Dark Reading.com, UBM Tech's online community for information security professionals. He is responsible for managing the site, assigning and editing content, and writing breaking news stories. Wilson has been recognized as one ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
jc
50%
50%
jc,
User Rank: Apprentice
5/2/2013 | 3:14:37 PM
re: Dark Reading's Seven-Year Itch
Happy Birthday Dark Reading!
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-0750
Published: 2015-05-22
The administrative web interface in Cisco Hosted Collaboration Solution (HCS) 10.6(1) and earlier allows remote authenticated users to execute arbitrary commands via crafted input to unspecified fields, aka Bug ID CSCut02786.

CVE-2012-1978
Published: 2015-05-21
Multiple cross-site request forgery (CSRF) vulnerabilities in Simple PHP Agenda 2.2.8 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add an administrator via a request to auth/process.php, (2) delete an administrator via a request to auth/admi...

CVE-2015-0741
Published: 2015-05-21
Multiple cross-site request forgery (CSRF) vulnerabilities in Cisco Prime Central for Hosted Collaboration Solution (PC4HCS) 10.6(1) and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCut04596.

CVE-2015-0742
Published: 2015-05-21
The Protocol Independent Multicast (PIM) application in Cisco Adaptive Security Appliance (ASA) Software 9.2(0.0), 9.2(0.104), 9.2(3.1), 9.2(3.4), 9.3(1.105), 9.3(2.100), 9.4(0.115), 100.13(0.21), 100.13(20.3), 100.13(21.9), and 100.14(1.1) does not properly implement multicast-forwarding registrati...

CVE-2015-0746
Published: 2015-05-21
The REST API in Cisco Access Control Server (ACS) 5.5(0.46.2) allows remote attackers to cause a denial of service (API outage) by sending many requests, aka Bug ID CSCut62022.

Dark Reading Radio
Archived Dark Reading Radio
Join security and risk expert John Pironti and Dark Reading Editor-in-Chief Tim Wilson for a live online discussion of the sea-changing shift in security strategy and the many ways it is affecting IT and business.