Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content posted in December 2016
<<   <   Page 3 / 3
Most iOS Apps In Enterprises Not Using Apple Encryption Feature
News  |  12/7/2016  | 
Despite a January 1, 2017 deadline, not many app vendors have switched on the Apple App Transport Security, according to a study by Appthority.
Pennsylvania State Prosecutor's Office Paid Ransom In 'Avalanche' Ransomware Attack
Quick Hits  |  12/6/2016  | 
Allegheny County state prosecutor's office paid attackers $1,400 in Bitcoin to free its data.
US Presidential Commission Outlines Key Cybersecurity Actions For Future Administrations
News  |  12/6/2016  | 
Report outlines ways to lock down critical infrastructure as well as IoT - and the urgent need to expand the security workforce by 2020 with 100,000 new jobs.
PoisonTap USB Device Can Hack A Locked PC In A Minute
Partner Perspectives  |  12/6/2016  | 
This is just one example of an emerging technology that enables anyone with physical access to a computers USB port to potentially harvest data and gain access by spoofing an Internet ecosystem.
Derivative Suit Against Home Depot For 2014 Data Breach Dismissed
Quick Hits  |  12/6/2016  | 
Judge says defendants may have been slow to spike up network security, but did not fail to act.
Web Gateways: 5 Big Security Challenges
Commentary  |  12/6/2016  | 
Overreliance on Web gateways is putting data, users, customers, organizations, and reputation in harm's way.
The 7 Most Sensational Breaches Of 2016
Slideshows  |  12/6/2016  | 
The biggest hacks, data exposures, and thefts that left companies and government entities reeling.
Adobe Flash Flaws Dominate Exploit Kits In 2016
News  |  12/6/2016  | 
The top 10 vulnerabilities this year were mostly Adobe Flash, followed by Internet Explorer, according to a Recorded Future study.
Cybersecurity Readiness Confidence Declined In 2016
News  |  12/5/2016  | 
New report querying security pros shows increase in worry about risks with mobile and cloud environments.
Protect Your Company From Hackable Holiday Gifts
Partner Perspectives  |  12/5/2016  | 
This holiday season promises to be full of devices, apps, and connectivity. Planning and executing appropriate security precautions now will save your business from a serious breach later.
Hackers Steal $31 Million From Russia's Central Bank
Quick Hits  |  12/5/2016  | 
Bank says cybercriminals faked client credentials to break into accounts and attempted to steal 5 billion rubles.
Software Salesman Pleads Guilty To PoS Scam
Quick Hits  |  12/5/2016  | 
Washington's John Yin allegedly sold point-of-sale systems with revenue suppression software, incurring government monetary loss of $3.4 million.
Avalanche Cybercrime Platform Takedown Leaves A Lot To Clean Up
Partner Perspectives  |  12/5/2016  | 
Help us wipe out the remaining bots and put an end to Avalanche once and for all.
Reality Check: Getting Serious About IoT Security
Commentary  |  12/5/2016  | 
The Department of Homeland Security is fully justified in urging security standards for the Internet of Things.
Where Cybercriminals Go To Buy Your Stolen Data
Slideshows  |  12/3/2016  | 
What malicious sites provide both free and paid access to stolen credit cards, company databases, malware and more?
'Frighteningly Easy' Hack Guesses Full Credit Card Details In 6 Seconds
News  |  12/2/2016  | 
Attack works only on Visa network, Newcastle University researchers say.
Dark Web Vendor Gets 50 Months Jail For ID Theft
Quick Hits  |  12/2/2016  | 
Minnesota resident Aaron Glende aka IcyEagle caught selling stolen bank details on AlphaBay market.
MasterCard, Visa Push Gas Pump EMV Migration Deadline To 2020
Quick Hits  |  12/2/2016  | 
Fuel merchants get three extra years to deploy the secure chip-enabled payment infrastructure in their complex environments.
The Human Firewall: Why People Are Critical To Email Security
Commentary  |  12/2/2016  | 
Technology is just the beginning; employees must be fully on board with security procedures.
Avalanche Botnet Comes Tumbling Down In Largest-Ever Sinkholing Operation
News  |  12/1/2016  | 
800,000 domains seized, sinkholed, or blocked, and five individuals arrested, in international effort to bring down botnet linked to 17 major malware families.
Mandia: Russian State Hackers Changed The Game
News  |  12/1/2016  | 
Founder of Mandiant and FireEye CEO says Russia doesn't appear to want to cover its tracks anymore.
Organizations In Saudi Arabia Reportedly Hit In Destructive New Shamoon Attacks
News  |  12/1/2016  | 
Thousands of computers at countrys main civil aviation authority and other entities rendered unusable by same malware that destroyed 30,000 computers at Aramco in 2012.
Holiday Weekend Online Payment Card Fraud 20% Higher In 2016
Quick Hits  |  12/1/2016  | 
In the face of EMV chips, criminals turned online to commit card-not-present fraud this Black Friday and Cyber Monday.
Cybercriminals Next Target: Long-Term Prizes (Part 2 of 2)
Partner Perspectives  |  12/1/2016  | 
Attacks of a more strategic nature will test early blockchain implementations and continue to explore ways to monetize weak IoT devices.
DMARC Continues To Confound Users, Report Says
News  |  12/1/2016  | 
Almost three-quarters of those who deploy email authentication standard fail to get its full benefits, ValiMail says.
20 Questions Smart Security Pros Should Ask About 'Intelligence'
Commentary  |  12/1/2016  | 
Threat intel is a hot but complicated topic that encompasses a lot more than just data feeds. Here's how to get beyond the fear, uncertainty, and doubt to maximize its potential.
Gaming Company Sues Ex-Employees Over Data Theft
Quick Hits  |  12/1/2016  | 
San Francisco-based Zynga alleges former workers took sensitive information with them when they joined rival company.
Microsoft 'Father Of SDL' Named To Top Post At SAFECode
News  |  12/1/2016  | 
Steve Lipner, the former Microsoft security leader credited with spearheading its security development lifecycle (SDL) initiative, takes on a new role as executive director at SAFECode.
<<   <   Page 3 / 3


News
Inside the Ransomware Campaigns Targeting Exchange Servers
Kelly Sheridan, Staff Editor, Dark Reading,  4/2/2021
Commentary
Beyond MITRE ATT&CK: The Case for a New Cyber Kill Chain
Rik Turner, Principal Analyst, Infrastructure Solutions, Omdia,  3/30/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-27180
PUBLISHED: 2021-04-14
An issue was discovered in MDaemon before 20.0.4. There is Reflected XSS in Webmail (aka WorldClient). It can be exploited via a GET request. It allows performing any action with the privileges of the attacked user.
CVE-2021-27181
PUBLISHED: 2021-04-14
An issue was discovered in MDaemon before 20.0.4. Remote Administration allows an attacker to perform a fixation of the anti-CSRF token. In order to exploit this issue, the user has to click on a malicious URL provided by the attacker and successfully authenticate into the application. Having the va...
CVE-2021-27182
PUBLISHED: 2021-04-14
An issue was discovered in MDaemon before 20.0.4. There is an IFRAME injection vulnerability in Webmail (aka WorldClient). It can be exploited via an email message. It allows an attacker to perform any action with the privileges of the attacked user.
CVE-2021-27183
PUBLISHED: 2021-04-14
An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly lead...
CVE-2021-29449
PUBLISHED: 2021-04-14
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the referenced GitHub security advisory for details.