Database Security
Authentication
Privacy
Compliance
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
7 Privacy Mistakes That Keep Security Pros on Their Toes
6 Serverless and Containerization Trends CISOs Should Track
Name that Toon: A Dog's Life
6 Ways to Beat Back BEC Attacks
How Intel Has Responded to Spectre and Meltdown
News & Commentary
2018's Most Common Vulnerabilities Include Issues New and Old
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
The most common vulnerabilities seen last year run the gamut from cross-site scripting to issues with CMS platforms.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
VC Investments in Cybersecurity Hit Record Highs in 2018
Jai Vijayan, Freelance writerNews
But rate of funding appears unsustainable, according to Strategic Cyber Ventures.
By Jai Vijayan Freelance writer, 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
GDPR Suit Filed Against Amazon, Apple
Dark Reading Staff, Quick Hits
An Austrian non-profit, led by privacy activist and attorney Max Schrems, has filed suit against 8 tech giants for non-compliance with the EU General Data Protection Regulation.
By Dark Reading Staff , 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
PCI Council Releases New Software Framework for DevOps Era
Ericka Chickowski, Contributing Writer, Dark ReadingNews
The PCI Software Security Framework will eventually replace PCI DA-DSS when it expires in 2022.
By Ericka Chickowski Contributing Writer, Dark Reading, 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
The Rx for HIPAA Compliance in the Cloud
Jason Polancich, CEO, MusubuCommentary
For medical entities, simply following HIPAA cloud service provider guidelines is no longer enough to ensure that your practice is protected from cyber threats, government investigations, and fines.
By Jason Polancich CEO, Musubu, 1/18/2019
Comment0 comments  |  Read  |  Post a Comment
8 Tips for Monitoring Cloud Security
Kelly Sheridan, Staff Editor, Dark Reading
Cloud security experts weigh in with the practices and tools they prefer to monitor and measure security metrics in the cloud.
By Kelly Sheridan Staff Editor, Dark Reading, 1/18/2019
Comment1 Comment  |  Read  |  Post a Comment
773 Million Email Addresses, 21 Million Passwords For Sale on Hacker Forum
Jai Vijayan, Freelance writerNews
Data appears to be from multiple breaches over past few years, says researcher who discovered it.
By Jai Vijayan Freelance writer, 1/17/2019
Comment1 Comment  |  Read  |  Post a Comment
Facebook Shuts Hundreds of Russia-Linked Pages, Accounts for Disinformation
Sara Peters, Senior Editor at Dark ReadingQuick Hits
Facebook says the accounts and pages were part of two unrelated disinformation operations aimed at targets outside the US.
By Sara Peters Senior Editor at Dark Reading, 1/17/2019
Comment1 Comment  |  Read  |  Post a Comment
Microsoft Launches New Azure DevOps Bug Bounty Program
Dark Reading Staff, Quick Hits
A new program will pay bounties of up to $20,000 for new critical bugs in the company's Azure DevOps systems and services.
By Dark Reading Staff , 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
New Attacks Target Recent PHP Framework Vulnerability
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
Multiple threat actors are using relatively simple techniques to take advantage of the vulnerability, launching cryptominers, skimmers, and other malware payloads.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
The Security Perimeter Is Dead; Long Live the New Endpoint Perimeter
Ofer Amitai, CEO, PortnoxCommentary
The network no longer provides an air gap against external threats, but access devices can take up the slack.
By Ofer Amitai CEO, Portnox, 1/17/2019
Comment2 comments  |  Read  |  Post a Comment
'We Want IoT Security Regulation,' Say 95% of IT Decision-Makers
Sara Peters, Senior Editor at Dark ReadingNews
New global survey shows businesses are valuing IoT security more highly, but they are still challenged by IoT data visibility and privacy.
By Sara Peters Senior Editor at Dark Reading, 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
Simulating Lateral Attacks Through Email
Igal Gofman, Head of Security Research at XM CyberCommentary
A skilled attacker can get inside your company by abusing common email applications. Here are three strategies to block them.
By Igal Gofman Head of Security Research at XM Cyber, 1/17/2019
Comment0 comments  |  Read  |  Post a Comment
Malware Built to Hack Building Automation Systems
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Researchers dig into vulnerabilities in popular building automation systems, devices.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 1/16/2019
Comment1 Comment  |  Read  |  Post a Comment
Oklahoma Data Leak Compromises Years of FBI Data
Dark Reading Staff, Quick Hits
The Oklahoma Securities Commission accidentally leaked 3 TB of information, including data on years of FBI investigations.
By Dark Reading Staff , 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
How the US Chooses Which Zero-Day Vulnerabilities to Stockpile
Ricardo Arroyo, Senior Technical Product Manager, Watchguard TechnologiesCommentary
When it comes to acceptable circumstances for government disclosure of zero-days, the new Vulnerabilities Equity Process might be the accountability practice security advocates have been waiting for.
By Ricardo Arroyo Senior Technical Product Manager, Watchguard Technologies, 1/16/2019
Comment1 Comment  |  Read  |  Post a Comment
BEC Groups Ramp Up Payroll Diversion Attacks
Jai Vijayan, Freelance writerNews
Criminals are increasingly trying to defraud businesses by diverting payrolls of CEOs, other senior executives, Agari says.
By Jai Vijayan Freelance writer, 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
Fortnite Players Compromised Via Epic Games Vulnerability
Kelly Sheridan, Staff Editor, Dark ReadingNews
Bugs in Epic Games' platform could let intruders take over players' accounts, view personal data, and/or buy in-game currency.
By Kelly Sheridan Staff Editor, Dark Reading, 1/16/2019
Comment1 Comment  |  Read  |  Post a Comment
Are You Listening to Your Kill Chain?
Ben Haley, SVP Engineering at HOPZERO SecurityCommentary
With the right tools and trained staff, any organization should be able to deal with threats before information is compromised.
By Ben Haley SVP Engineering at HOPZERO Security, 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
Triton/Trisis Attack Was More Widespread Than Publicly Known
Kelly Jackson Higgins, Executive Editor at Dark ReadingNews
Signs of the attack first showed up two months before it was identified as a cyberattack, but they were mistaken for a pure equipment failure by Schneider Electric, security expert reveals at S4x19.
By Kelly Jackson Higgins Executive Editor at Dark Reading, 1/16/2019
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
More Conversations
Products & Releases
Aspen Tech Policy Hub Launches Inaugural Fellowship Program
Syncsort Survey Finds Disconnect Between Confidence in IT Security Programs and Data Breaches
61% of Organizations Say They Have Either Had a Breach or Aren’t Sure
Trend Micro Rolls Out IoT Security 2.0
FireEye Updates Email Security with New Threat Detection and Evasion Defenses Based on Insights from the Front Lines
Nuspire Launches Managed Detection And Response Solution With Three Detection And Response Services
Criminal Charges Filed in Los Angeles and Alaska in Conjunction with Seizures Of 15 Websites Offering DDoS-For-Hire Services
Harris Poll Reveals American Attitudes Towards Cybersecurity and Privacy
More Products & Releases
PR Newswire
Register for Dark Reading Newsletters
Cartoon Contest
White Papers
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-3906
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 contains hardcoded credentials in the WCF service on port 9003. An authenticated remote attacker can use these credentials to access the badge system database and modify its contents.
CVE-2019-3907
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 stores user credentials and other sensitive information with a known weak encryption method (MD5 hash of a salt and password).
CVE-2019-3908
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 stores backup files as encrypted zip files. The password to the zip is hard-coded and unchangeable. An attacker with access to these backups can decrypt them and obtain sensitive data.
CVE-2019-3909
PUBLISHED: 2019-01-18
Premisys Identicard version 3.1.190 database uses default credentials. Users are unable to change the credentials without vendor intervention.
CVE-2019-3910
PUBLISHED: 2019-01-18
Crestron AM-100 before firmware version 1.6.0.2 contains an authentication bypass in the web interface's return.cgi script. Unauthenticated remote users can use the bypass to access some administrator functionality such as configuring update sources and rebooting the device.
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Flash Poll
Video
Slideshows
Twitter Feed