News & Commentary
Content tagged with Authentication posted in December 2016
|
Macau Resident Held For Hacking, Insider Trading Charges In US
Iat Hong and two others allegedly breached computers of major US law firms and stole confidential exchange on M&A transactions.
Network Security: An Ounce Of Prevention Is Worth A Pound Of Reaction
For humans ailments, prevention might begin with an allergist. In security, it's the network engineer.
Financial Data Worth Millions Unwittingly Exposed In Ameriprise Accounts
Leak of bank account and financial planning details emanated from a financial advisor's unsecured Internet-connected backup drive at home.
Amit Yoran Leaves Dell RSA To Join Tenable As New CEO
Yoran says recent Dell acquisition of RSA parent company EMC did 'not really' impact his decision to leave.
8 Most Hackable Holiday Gifts, 2016 Edition
You better watch out! Otherwise, you may be giving the gift of malware or unauthorized access to networks and devices.
The Internet Of Things: When Bigger Is Not Better
What happens when 10,000 companies add programmability and connectivity to their products, and we increase the Internet’s attack surface by a million times or more?
Pay Ransom Or Infect Others!
Still under development, new ransomware will ask victims to free their files by paying 1 bitcoin or by infecting two others.
How Retailers Can Fight Holiday Season Hackers
Experts offer tips for locking down retailers’ point-of-sale systems for the busy holiday shopping season.
Researchers Find Backdoors, Bugs In Sony, White Box IP Cameras
New vulnerabilities discovered by SEC Consult and Cybereason highight increasing IoT threat to enterprises.
Biometric Technology Is Not A Cure-All For Password Woes
No single authentication token is infallible. The only real solution is multifactor authentication.
Dark Web Vendor Gets 50 Months Jail For ID Theft
Minnesota resident Aaron Glende aka IcyEagle caught selling stolen bank details on AlphaBay market.
DMARC Continues To Confound Users, Report Says
Almost three-quarters of those who deploy email authentication standard fail to get its full benefits, ValiMail says.
|
White Papers
Video
10 Comments
Current Issue
5 Emerging Cyber Threats to Watch for in 2019Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
How Enterprises Are Attacking the Cybersecurity Problem
Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.
Twitter Feed
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database CVE-2019-7629
PUBLISHED: 2019-02-18
PUBLISHED: 2019-02-18
PUBLISHED: 2019-02-18
PUBLISHED: 2019-02-18
PUBLISHED: 2019-02-18
From DHS/US-CERT's National Vulnerability Database CVE-2019-7629
PUBLISHED: 2019-02-18
Stack-based buffer overflow in the strip_vt102_codes function in TinTin++ 2.01.6 and WinTin++ 2.01.6 allows remote attackers to execute arbitrary code by sending a long message to the client.
CVE-2019-8919PUBLISHED: 2019-02-18
The seadroid (aka Seafile Android Client) application through 2.2.13 for Android always uses the same Initialization Vector (IV) with Cipher Block Chaining (CBC) Mode to encrypt private data, making it easier to conduct chosen-plaintext attacks or dictionary attacks.
CVE-2019-8917PUBLISHED: 2019-02-18
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may b...
CVE-2019-8908PUBLISHED: 2019-02-18
An issue was discovered in WTCMS 1.0. It allows remote attackers to execute arbitrary PHP code by going to the "Setting -> Mailbox configuration -> Registration email template" screen, and uploading an image file, as demonstrated by a .php filename and the "Content-Type: image/g...
CVE-2019-8909PUBLISHED: 2019-02-18
An issue was discovered in WTCMS 1.0. It allows remote attackers to cause a denial of service (resource consumption) via crafted dimensions for the verification code image.
- Terms of Service
- Privacy Statement
- Legal Entities
- Copyright © 2019 UBM, All rights reserved
Tweet This