Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
News & Commentary
Mirai Groups Target Business IoT Devices
Robert Lemos, Contributing WriterNews
More than 30% of Mirai attacks, and an increasing number of variants of the malicious malare, are going after enterprise IoT devices, raising the stakes for business.
By Robert Lemos Contributing Writer, 7/19/2019
Comment0 comments  |  Read  |  Post a Comment
Bluetooth Bug Enables Tracking on Windows 10, iOS & macOS Devices
Kelly Sheridan, Staff Editor, Dark ReadingNews
Researchers discover a third-party algorithm in multiple high-profile Bluetooth devices exposes users to third-party tracking and data access.
By Kelly Sheridan Staff Editor, Dark Reading, 7/17/2019
Comment0 comments  |  Read  |  Post a Comment
Industry Insight: Checking Up on Healthcare Security
Kelly Sheridan, Staff Editor, Dark ReadingNews
Modern threats putting healthcare organization at risk, how they're improving their security posture, and where many fall short.
By Kelly Sheridan Staff Editor, Dark Reading, 7/10/2019
Comment1 Comment  |  Read  |  Post a Comment
Vulnerability Found in GE Anesthesia Machines
Dark Reading Staff, Quick Hits
GE Healthcare has released a statement claiming the bug is not in the machine itself and does not pose direct risk to patients.
By Dark Reading Staff , 7/10/2019
Comment0 comments  |  Read  |  Post a Comment
10 Ways to Keep a Rogue RasPi From Wrecking Your Network
Curtis Franklin Jr., Senior Editor at Dark Reading
A Raspberry Pi attached to the network at NASA JPL became the doorway for a massive intrusion and subsequent data loss. Here's how to keep the same thing from happening to your network.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 7/10/2019
Comment6 comments  |  Read  |  Post a Comment
Cybercriminals Target Budding Cannabis Retailers
Dark Reading Staff, Quick Hits
Companies in the young, rapidly growing industry are targeted for sensitive information they store and immature security practices.
By Dark Reading Staff , 7/9/2019
Comment0 comments  |  Read  |  Post a Comment
D-Link Agrees to Strengthen Device Security
Dark Reading Staff, Quick Hits
A settlement with the FTC should mean comprehensive security upgrades for D-Link routers and IP camera.
By Dark Reading Staff , 7/3/2019
Comment1 Comment  |  Read  |  Post a Comment
NIST Issues IoT Risk Guidelines
Dark Reading Staff, Quick Hits
A new report offers the first step toward understanding and managing IoT cybersecurity risks.
By Dark Reading Staff , 6/27/2019
Comment3 comments  |  Read  |  Post a Comment
New Linux Worm Attacks IoT Devices
Dark Reading Staff, Quick Hits
Silex has 'bricked' more than 2,000 Linux-based IoT devices so far.
By Dark Reading Staff , 6/26/2019
Comment12 comments  |  Read  |  Post a Comment
Raspberry Pi Used in JPL Breach
Dark Reading Staff, Quick Hits
NASA report shows exfiltration totaling more than 100 GB of information since 2009.
By Dark Reading Staff , 6/24/2019
Comment1 Comment  |  Read  |  Post a Comment
7 2019 Security Venture Fund Deals You Should Know
Curtis Franklin Jr., Senior Editor at Dark Reading
2019 has, so far, been a busy year for venture capitalists in the security industry. Here are 7 funding rounds important because of the technologies or market trends they represent.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 6/20/2019
Comment0 comments  |  Read  |  Post a Comment
Insecure Home IoT Devices a Clear and Present Danger to Corporate Security
Jai Vijayan, Contributing WriterNews
Avast-sponsored study shows wide prevalence of IoT devices, many with weak credentials and other security vulnerabilities.
By Jai Vijayan Contributing Writer, 6/19/2019
Comment3 comments  |  Read  |  Post a Comment
Power Outage Hits Millions in South America
Dark Reading Staff, Quick Hits
The outage, which is not (so far) seen as the result of a cyberattack, still had a significant impact on network and server availability.
By Dark Reading Staff , 6/17/2019
Comment0 comments  |  Read  |  Post a Comment
Cyberattack Hits Aircraft Parts Manufacturer
Dark Reading Staff, Quick Hits
Belgium's Asco has shut down manufacturing around the world, including the US, in response to a major cybersecurity event, but what happened isn't clear.
By Dark Reading Staff , 6/13/2019
Comment0 comments  |  Read  |  Post a Comment
Cisco Buys Sentryo
Curtis Franklin Jr., Senior Editor at Dark ReadingNews
Cisco is adding the French company's network visibility products to its IoT network lineup.
By Curtis Franklin Jr. Senior Editor at Dark Reading, 6/6/2019
Comment0 comments  |  Read  |  Post a Comment
How to Get the Most Benefits from Biometrics
Bojan Simic, Chief Technology Officer & Co-Founder of HYPRCommentary
Providing an easy-to-use, uniform authentication experience without passwords is simpler than you may think.
By Bojan Simic Chief Technology Officer & Co-Founder of HYPR, 6/5/2019
Comment2 comments  |  Read  |  Post a Comment
Focusing on Endpoints: 5 Steps to Fight Cybercrime
Matthew Lewinski, Distinguished Engineer at Quest SoftwareCommentary
Follow these best practices to strengthen endpoint management strategies and protect company data.
By Matthew Lewinski Distinguished Engineer at Quest Software, 5/31/2019
Comment3 comments  |  Read  |  Post a Comment
7 Recent Wins Against Cybercrime
Jai Vijayan, Contributing Writer
The increasing number of successful law enforcement actions and prosecutions suggest that cybercriminals have plenty of reason to be looking over their shoulders.
By Jai Vijayan Contributing Writer, 5/24/2019
Comment0 comments  |  Read  |  Post a Comment
To Manage Security Risk, Manage Data First
Kelly Sheridan, Staff Editor, Dark ReadingNews
At Interop 2019, IT and security experts urged attendees to focus on data asset management as a means of mitigating risk.
By Kelly Sheridan Staff Editor, Dark Reading, 5/23/2019
Comment1 Comment  |  Read  |  Post a Comment
Consumer IoT Devices Are Compromising Enterprise Networks
Ericka Chickowski, Contributing WriterNews
While IoT devices continue to multiply, the latest studies show a dangerous lack of visibility into those connected to enterprise networks.
By Ericka Chickowski Contributing Writer, 5/22/2019
Comment0 comments  |  Read  |  Post a Comment
More Stories
Current Conversations
Posted by websitejk
Current Conversations Concur
In reply to: Re: Pi not RasPi
Post Your Own Reply
Posted by websitejk
Current Conversations Concur 💯
In reply to: Re: Pi not RasPi
Post Your Own Reply
Posted by RyanSepe
Current Conversations That's depressing.
In reply to: Re: Defaults
Post Your Own Reply
More Conversations
Where Businesses Waste Endpoint Security Budgets
Kelly Sheridan, Staff Editor, Dark Reading,  7/15/2019
US Mayors Commit to Just Saying No to Ransomware
Robert Lemos, Contributing Writer,  7/16/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-17210
PUBLISHED: 2019-07-20
An issue was discovered in PrinterOn Central Print Services (CPS) through 4.1.4. The core components that create and launch a print job do not perform complete verification of the session cookie that is supplied to them. As a result, an attacker with guest/pseudo-guest level permissions can bypass t...
CVE-2019-12934
PUBLISHED: 2019-07-20
An issue was discovered in the wp-code-highlightjs plugin through 0.6.2 for WordPress. wp-admin/options-general.php?page=wp-code-highlight-js allows CSRF, as demonstrated by an XSS payload in the hljs_additional_css parameter.
CVE-2019-9229
PUBLISHED: 2019-07-20
An issue was discovered on AudioCodes Mediant 500L-MSBR, 500-MBSR, M800B-MSBR and 800C-MSBR devices with firmware versions F7.20A to F7.20A.251. An internal interface exposed to the link-local address 169.254.254.253 allows attackers in the local network to access multiple quagga VTYs. Attackers can...
CVE-2019-12815
PUBLISHED: 2019-07-19
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
CVE-2019-13569
PUBLISHED: 2019-07-19
A SQL injection vulnerability exists in the Icegram Email Subscribers & Newsletters plugin through 4.1.7 for WordPress. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system.