Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Mobile posted in January 2016
Clever LG Droid Bug Can Attack You Through Birthday Notifications
Quick Hits  |  1/29/2016  | 
'SNAP' vulnerability affects Smart Notice application pre-installed on every new LG device.
The Apple App Store Incident: Trouble in Paradise?
Commentary  |  1/22/2016  | 
The fact that Apples security model has worked so well in the past doesnt mean it will work well forever. Heres why.
'Asacub' Trojan Converted To Mobile Banking Weapon
News  |  1/21/2016  | 
In a sign of the times, what was once a routine data-stealing tool has evolved into a dangerous mobile banking threat.
The State Of Mobile Insecurity
News  |  1/13/2016  | 
It's deja vu all over again as mobile app development looks like traditional dev shops did a half a decade ago.
CES 2016: Top 10 Security Innovations
News  |  1/12/2016  | 
Check out some of the most interesting security innovations unveiled at the Consumer Electronics Show in Las Vegas last week.
Mobile Apps A Vulnerable Spot For Connected Security Cameras
News  |  1/7/2016  | 
Study finds security camera vendors making the same rookie infosec mistakes that other IoT vendors make.
Blackphone Hackable Via Newly Found Bug
News  |  1/6/2016  | 
Modem flaw in Silent Circle's secure smartphone could be exploited to hijack the phone and intercept and control texts, calls, and other features.


How to Better Secure Your Microsoft 365 Environment
Kelly Sheridan, Staff Editor, Dark Reading,  1/25/2021
Attackers Leave Stolen Credentials Searchable on Google
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-3318
PUBLISHED: 2021-01-27
attach/ajax.php in DzzOffice through 2.02.1 allows XSS via the editorid parameter.
CVE-2020-5427
PUBLISHED: 2021-01-27
In Spring Cloud Data Flow, versions 2.6.x prior to 2.6.5, versions 2.5.x prior 2.5.4, an application is vulnerable to SQL injection when requesting task execution.
CVE-2020-5428
PUBLISHED: 2021-01-27
In applications using Spring Cloud Task 2.2.4.RELEASE and below, may be vulnerable to SQL injection when exercising certain lookup queries in the TaskExplorer.
CVE-2021-20357
PUBLISHED: 2021-01-27
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.
CVE-2020-4865
PUBLISHED: 2021-01-27
IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190741.