Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Opinion

Content posted in September 2012
The Plural Of Data Is Not Analytics
Commentary  |  9/30/2012  | 
When it comes to security monitoring, searching and reporting aren’t always enough. The added value comes from analytics: turning data into information
Security Intelligence = Table Stakes
Commentary  |  9/25/2012  | 
Smart security practitioners know they can no longer rely on their vendors to provide the intelligence they need to deal with today's attacks
Launching An IAM Project: Where To Start
Commentary  |  9/21/2012  | 
How to think architecture-centric, not audit-centric, in identity and access
A Look At Encrypted Query Processing
Commentary  |  9/20/2012  | 
Stupid encryption tricks, only without a funny YouTube video
How Cybercriminals Choose Their Targets
Commentary  |  9/14/2012  | 
Attackers look for companies with poor defenses and a lack of security skills, so no business, not even an SMB, is immune.
What Identity And Access Management Can Learn From 'Car Talk'
Commentary  |  9/10/2012  | 
Compliance-driven IAM results in the enterprise staring at a Chinese menu of options, and all they can do is point to one that they partially understand
Great, Now We Have To Pee In The Boat
Commentary  |  9/10/2012  | 
Spontaneous reactions can create unintended and costly compliance issues
Flash First: Your Next Storage Strategy?
Commentary  |  9/5/2012  | 
As flash storage costs decline, its performance advantages over hard drives become even more appealing.
Talking 'Bout My Reputation
Commentary  |  9/1/2012  | 
When good security monitoring means not believing everything you're told


Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-12512
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting
CVE-2020-12513
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.
CVE-2020-12514
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd
CVE-2020-12525
PUBLISHED: 2021-01-22
M&M Software fdtCONTAINER Component in versions below 3.5.20304.x and between 3.6 and 3.6.20304.x is vulnerable to deserialization of untrusted data in its project storage.
CVE-2020-12511
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a Cross-Site Request Forgery (CSRF) in the web interface.