News & Commentary

Content posted in April 2016
Page 1 / 3   >   >>
6 Steps for Responding to a Disruptive Attack
Slideshows  |  4/29/2016  | 
Todays threat landscape dictates that companies must have a workable incident response plan.
Stop Building Silos. Security Is Everyones Problem
Commentary  |  4/29/2016  | 
Yes, its true that the speed of DevOps has made security more difficult. But that doesnt mean accelerated release cycles and secure applications have to be mutually exclusive.
Symantec CEO Browns Exit Highlights Companys Continuing Struggles
News  |  4/29/2016  | 
For the third time since 2012, Symantec is looking for a new CEO to help turn around the business.
Qatar National Bank Probes Possible Data Breach
Quick Hits  |  4/29/2016  | 
Bank details exposed include those of ruling family and defense officials, reports say.
San Bernardino iPhone Hack Tool Cost FBI Under $1 Million
Quick Hits  |  4/29/2016  | 
Agency now owns mechanism that can exploit unknown Apple security flaws.
Hacker Group Exploits 'Hot Patching' In Windows To Cloak Cyber Espionage
News  |  4/28/2016  | 
Group called Platinum employs spear phishing and malicious use of hot patching to steal information from government agencies in Asia.
Government Cybersecurity Performance, Confidence Bottoms Out
News  |  4/28/2016  | 
In the wake of OPM and other big gov breaches, government cybersecurity performance scores and employee confidence ratings sink through the floor.
The Morning After: What Happens to Data Post Breach?
Partner Perspectives  |  4/28/2016  | 
We need consumers and businesses to not simply shrug off data breaches but to take active measures to protect their data. We are hopeful that new insights will provide a compelling answer to the question So what?
How To Stay Secure At The Hotel On A Business Trip
News  |  4/28/2016  | 
As POS malware attacks on hotels increase and threat actors target executives, traveling for business puts company data at risk.
6 Reasons ISPs Must Step Up Defenses Against DDoS Attacks
Commentary  |  4/28/2016  | 
Conducting a DDoS attack used to require a significant amount of talent. But today, a high school student with basic hacking skills can access tools that will challenge even the most experienced ISP security teams.
10 Newsmakers Who Shaped Security In the Past Decade
Slideshows  |  4/28/2016  | 
In celebration of Dark Readings 10th anniversary, we profile ten people whose actions influenced and shaped the trajectory of the industry for better or for worse -- in the past ten years.
German Nuclear Power Plant Infected With Malware
Quick Hits  |  4/28/2016  | 
Conficker, Ramnit malware found in Gundremmingen 'harmless' since the affected systems were not connected to the Internet.
Estonian Man Gets 7-Year Sentence For Clickjacking Attacks
Quick Hits  |  4/28/2016  | 
Cybercrime gang jailed for click-fraud scheme affecting 4 million computers in over 100 countries.
Pro-ISIS Hacking Groups Growing, Unifying, But Still Unskilled
News  |  4/28/2016  | 
Flashpoint report outlines the patchwork of hacking groups and the validity of their claims to fame.
4 Tips For Planning An Effective Security Budget
News  |  4/27/2016  | 
Security budgets start with managers assessing all of their resources and measuring the effectiveness of their security programs for strengths and weaknesses
PCI DSS 3.2: 3 Things You Need to Know
News  |  4/27/2016  | 
The latest round of upgrades are incremental yet necessary.
8 Signs Your Security Culture Lacks Consistency
Commentary  |  4/27/2016  | 
Organizations that practice what they preach and match their actions to their words do far better achieving their goals than those that do not. Here's why that matters.
10 Questions To Ask Yourself About Securing Big Data
Partner Perspectives  |  4/27/2016  | 
Big data introduces new wrinkles for managing data volume, workloads, and tools. Securing increasingly large amounts of data begins with a good governance model across the information life cycle. From there, you may need specific controls to address various vulnerabilities. Here are a set of questions to help ensure that you have everything covered.
Top 10 Web Hacking Techniques For 2015
Slideshows  |  4/27/2016  | 
The most influential research on vulnerabilities and exploits, as voted on by the security community.
SWIFT Issues Warning About Multiple Security Incidents
Quick Hits  |  4/27/2016  | 
Group releases new software update to help 'thwart' probable malware used in heists.
FBI Rules Out Disclosing iPhone Software Flaw
Quick Hits  |  4/27/2016  | 
Agency cites limited understanding of method used to crack San Bernardino iPhone.
'Dogspectus' Breaks New Ground For Android Ransomware
News  |  4/26/2016  | 
Blue Coat says it's the first Android ransomware that installs without user interaction
The Growing Sophistication Of Distributed Attacks
News  |  4/26/2016  | 
Botnet and DDoS attacks growing more advanced and more crucial than ever to cybercriminal's attack strategies.
Crowdsourcing The Dark Web: A One-Stop Ran$om Shop
Commentary  |  4/26/2016  | 
Say hello to Ran$umBin, a new kind of ransom market dedicated to criminals and victims alike.
Mexican Voter Database Exposed
Quick Hits  |  4/26/2016  | 
Unsecured database leads to 'leak' of private information of 87 million Mexican voters.
Extortionists Demand Ransom In 'Empty' DDoS Threats
Quick Hits  |  4/26/2016  | 
Gang of cybercriminals calling itself the Armada Collective threatens online businesses in return for Bitcoins.
Verizon DBIR: Over Half Of Data Breaches Exploited Legitimate Passwords In 2015
News  |  4/26/2016  | 
Financial sector suffered the most breaches last year, followed by the accommodation/hotel sector.
Malware At Root Of Bangladesh Bank Heist Lies To SWIFT Financial Platform
News  |  4/25/2016  | 
Customized malware hid $81 million of wire transfers until the money had been safely laundered.
Surviving InfoSec: Digital Crime And Emotional Grime
Commentary  |  4/25/2016  | 
The never ending stream of threats, vulnerabilities, and potential attacks can take its toll on the typical security professional. Heres how to fight back against the pressure.
US Cyber Command Hacks ISIS
Quick Hits  |  4/25/2016  | 
'Cyber bombs' target ISIS online communications infrastructure.
Dark Reading Marks 10th Anniversary With Month Of Special Coverage
Commentary  |  4/25/2016  | 
Looking back at the decade in security.
Be Prepared: How Proactivity Improves Cybersecurity Defense
Commentary  |  4/23/2016  | 
These five strategies will help you achieve a state of readiness in a landscape of unpredictable risk.
10 Tips for Securing Your SAP Implementation
Slideshows  |  4/23/2016  | 
Without clear ownership of security for a critical business platform like SAP, it should come as no surprise that SAP cybersecurity continues to fall through the cracks among IT, admin, security and InfoSec teams.
Microsoft: Keep Calm But Vigilant About Ransomware
News  |  4/22/2016  | 
Though a growing problem, ransomware is still nowhere as prevalent as other threats, Microsoft says.
The Problem With Patching: 7 Top Complaints
Commentary  |  4/22/2016  | 
Is your security team suffering from patching fatigue? Check out these tips and eliminate critical vulnerabilities in your IT environment.
5 Features to Look For In A Next-Generation Firewall
Slideshows  |  4/22/2016  | 
When it comes to NGFWs, its the integration that counts.
SpyEye Creators Sentenced To Long Prison Terms
News  |  4/21/2016  | 
FBI found that arrest halted the release of nasty SpyEye 2.0.
Mea Culpa: Time To Build Security Into Connectivity
Commentary  |  4/21/2016  | 
How those of us who spent decades developing faster, easier, and more scalable networking technology have made the lives of our security counterparts a living hell.
Databases Remain Soft Underbelly Of Cybersecurity
News  |  4/21/2016  | 
Most enterprises still don't continuously monitor database activity.
Security Lessons from C-3PO, Former CSO of the Millennium Falcon
Commentary  |  4/21/2016  | 
The business will take risks. When and how to speak up.
The Perils Of Dynamically Pulling Dependencies
Partner Perspectives  |  4/21/2016  | 
The wide range of functions and broad availability of external packages is a tremendous boon to software development, but keep an eye on the security implications to manage your risk.
A Brief History Of Ransomware
Slideshows  |  4/21/2016  | 
A top ten chronicle of more than a decade of notable ransomware variants and trends.
How Best To Back Up Your Data In Case Of A Ransomware Attack
News  |  4/21/2016  | 
A ransomware attack could be around the corner, but there are some practical steps you can take to back up your data and deflect the attack.
5 Reasons Cybercriminals Target Healthcare
News  |  4/21/2016  | 
Cybercriminals are increasingly targeting healthcare institutions and successfully deploying malware and ransomware to exploit hospitals' need to recover quickly.
How Hackers Have Honed Their Attacks
News  |  4/21/2016  | 
More organizations are getting breached, but data exfiltration is becoming harder for attackers, new data shows.
How One Cybercrime Gang Is Ratcheting Up PoS Attacks
News  |  4/20/2016  | 
With magnetic-stripe payment card transactions gradually starting to disappear in the US, cybercriminals have been on a tear with PoS attacks against retail and hospitality targets that haven't yet adopted EMV card payment, FireEye researchers say.
Manufacturers Suffer Increase In Cyberattacks
News  |  4/20/2016  | 
Cyberattacks on manufacturing companies on the rise as attackers attempt to steal valuable intellectual property and information.
BitDefender Releases Free Petya Ransomware 'Vaccine'
Quick Hits  |  4/20/2016  | 
Tool decrypts endpoints victimized by the nasty ransomware that encrypts entire disks.
Internal Pen-Testing: Not Just For Compliance Audits Anymore
Commentary  |  4/20/2016  | 
How turning your internal penetration team into a 'Friendly Network Force' can identify and shut down the cracks in your security program.
MIT Launches Bug Bounty Program
News  |  4/20/2016  | 
University will reward MIT affiliates who find specific categories of flaws in its web domains.
Page 1 / 3   >   >>


Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Australian Teen Hacked Apple Network
Dark Reading Staff 8/17/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-15504
PUBLISHED: 2018-08-18
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. The server mishandles some HTTP request fields associated with time, which results in a NULL pointer dereference, as demonstrated by If-Modified-Since or If-Unmodified-Since with a month greater than 11.
CVE-2018-15505
PUBLISHED: 2018-08-18
An issue was discovered in Embedthis GoAhead before 4.0.1 and Appweb before 7.0.2. An HTTP POST request with a specially crafted "Host" header field may cause a NULL pointer dereference and thus cause a denial of service, as demonstrated by the lack of a trailing ']' character in an IPv6 a...
CVE-2018-15492
PUBLISHED: 2018-08-18
A vulnerability in the lservnt.exe component of Sentinel License Manager version 8.5.3.35 (fixed in 8.5.3.2403) causes UDP amplification.
CVE-2018-15494
PUBLISHED: 2018-08-18
In Dojo Toolkit before 1.14, there is unescaped string injection in dojox/Grid/DataGrid.
CVE-2018-15495
PUBLISHED: 2018-08-18
/filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec call, as demonstrated by a file:///etc/passwd value.