News & Commentary

Content tagged with Database Security posted in March 2012
Cybercrime's Love Affair With Havij Spells SQL Injection Trouble
News  |  3/28/2012  | 
Automated SQL injection attack tool makes database extraction as easy as a button click for cybercriminals
$1.5M Fine Marks A New Era In HITECH Enforcement
News  |  3/21/2012  | 
Data breach at BlueCross BlueShield of Tennessee, and subsequent penalty, stands as example of financial fallout from poor healthcare IT security practices
Nobody Cares About HIPAA
News  |  3/16/2012  | 
Compliance is seen mainly as a costly inconvenience in many organizations.
Slide Show: The (Not-So) Elite Eight In Higher Ed Breach Madness
Slideshows  |  3/14/2012  | 
Basketball has March Madness, but higher ed IT should be competing to stay out of the brackets for last year's worst breaches
Data Theft Costs Tennessee Blue Cross Big Bucks
News  |  3/14/2012  | 
Blue Cross Blue Shield of Tennessee agrees to pay $1.5 million to settle case involving theft of 57 unencrypted hard drives that contained protected health information.
Healthcare Security Pros Must Speak More Like CFOs
News  |  3/8/2012  | 
Financial Impact of Breached Protected Health Information report helps health IT pros make the business case for patient data protection.
Healthcare Security Pros Need To Speak The Language Of Finance
News  |  3/7/2012  | 
Experts say PHI protectors can't pay for data protection because they don't know how to make the business case for it
Biometrics Shore Up Patient Data Security
News  |  3/7/2012  | 
Saratoga Hospital uses biometric technology to better manage and track health providers’ access to patient data.
5 Steps To Assess Health Data Breach Risks
News  |  3/5/2012  | 
New report delves into the threats healthcare providers face for potential patient data breaches, and provides steps and tools to help assess those risks.


Valentine's Emails Laced with Gandcrab Ransomware
Kelly Sheridan, Staff Editor, Dark Reading,  2/14/2019
High Stress Levels Impacting CISOs Physically, Mentally
Jai Vijayan, Freelance writer,  2/14/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-8396
PUBLISHED: 2019-02-17
A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."
CVE-2019-8397
PUBLISHED: 2019-02-17
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.
CVE-2019-8398
PUBLISHED: 2019-02-17
An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.
CVE-2019-8400
PUBLISHED: 2019-02-17
ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.
CVE-2019-7399
PUBLISHED: 2019-02-17
Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages.