Upcoming Webinars
Webinar Archives
Don't Leave Policyholders Waiting: How to Improve Responsiveness in a Multi-Channel World
Date: Feb 26, 2015
View webinar
Join us for an interactive discussion of technology options that can help insurers leverage information--regardless of format or channel--to streamline communications and speed up responses to policyholders and prospects in order to meet changing expectations.

Managing Big Data in Production...Successfully
Date: Feb 17, 2015
View webinar
Many companies launch Big Data pilots to familiarize themselves with technologies such as Hadoop and to demonstrate value to the business. But as they transition from Big Data pilots to Big Data in production, they encounter significant new challenges--including effective management of complex analytic and pre-analytic environments cobbled together from highly heterogeneous components. Register for this Webinar to learn more.

Design and Implementation Best Practices for E-Signatures in Banking
Date: Feb 10, 2015
View webinar
Register for this webinar to learn how to effectively extend e-signatures across multiple business lines at your bank.

Application Driven Network Performance Management
Date: Jan 29, 2015
View webinar
In this webcast, we'll discuss and explore the tools, techniques, policies, and strategies that can help you define the metrics for success, and achieve them to satisfy both your users and your business.

Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
10 Recommendations for Outsourcing Security
10 Recommendations for Outsourcing Security
Enterprises today have a wide range of third-party options to help improve their defenses, including MSSPs, auditing and penetration testing, and DDoS protection. But are there situations in which a service provider might actually increase risk?
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-1375
Published: 2015-01-28
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not properly restrict access to the upload functionality, which allows remote attackers to write to arbitrary files.

CVE-2015-1376
Published: 2015-01-28
pixabay-images.php in the Pixabay Images plugin before 2.4 for WordPress does not validate hostnames, which allows remote authenticated users to write to arbitrary files via an upload URL with a host other than pixabay.com.

CVE-2015-1419
Published: 2015-01-28
Unspecified vulnerability in vsftp 3.0.2 and earlier allows remote attackers to bypass access restrictions via unknown vectors, related to deny_file parsing.

CVE-2014-5211
Published: 2015-01-27
Stack-based buffer overflow in the Attachmate Reflection FTP Client before 14.1.433 allows remote FTP servers to execute arbitrary code via a large PWD response.

CVE-2014-8154
Published: 2015-01-27
The Gst.MapInfo function in Vala 0.26.0 and 0.26.1 uses an incorrect buffer length declaration for the Gstreamer bindings, which allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, which trigger a heap-based buffer overf...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
If you’re a security professional, you’ve probably been asked many questions about the December attack on Sony. On Jan. 21 at 1pm eastern, you can join a special, one-hour Dark Reading Radio discussion devoted to the Sony hack and the issues that may arise from it.