Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Perimeter posted in November 2011
DAM Is Morphing
Commentary  |  11/30/2011  | 
DAM may not be DAM much longer.
It's Time to Dump The 'Insider Threat'
Commentary  |  11/30/2011  | 
Blaming the "insider threat" merely hides your real security risks
SSL's Future
Commentary  |  11/28/2011  | 
SSL will evolve to meet requirements for e-commerce and mobile
Penetration Tests: Not Getting 'In' Is An Option
Commentary  |  11/28/2011  | 
Pen testers must get beyond just breaking in, and clients need to understand how the tester's results map to business risk
Partner Management: Assessing Compliance Capability And Willingness
Commentary  |  11/27/2011  | 
The first step is to determine the partner's understanding of its responsibility and ability to comply
Will Software Authentication Survive?
Commentary  |  11/26/2011  | 
Protecting secret keys or seeds in software without the risk of being stolen is crucial
Partner Management: Compliance Program Is Essential
Commentary  |  11/26/2011  | 
Understanding the risk associated with a partner relationship and managing it accordingly is key
Embedding Digital Certificates In Hardware
Commentary  |  11/23/2011  | 
A natural evolution, but there are a few potential pitfalls to avoid
Big Data And Bad Security
Commentary  |  11/16/2011  | 
The rush to collect and mine big data leaves data security in the dust
Survey: Half Of Firewall Rules Improperly Configured
Quick Hits  |  11/15/2011  | 
Firewall administration, auditing still mostly a manual process, leading to errors and breach risks
Plugging The Kiosk-Sized Security Hole
Commentary  |  11/15/2011  | 
Companies like to set up Internet kiosks for customers and job applicants, but their convenience can be their undoing
Product Watch: New RedSeal App Lets Enterprises Benchmark Security Risk, Attack Surface
News  |  11/9/2011  | 
RedSeal 5 offers a way to deliver dashboards on security posture, company says
Fighting 0days With Fundamentals
Commentary  |  11/7/2011  | 
How to pre-emptively secure systems against 0day attacks that, by definition, we know nothing about
Productivity, Data Losses Biggest Cost In Cyberattacks
Quick Hits  |  11/3/2011  | 
Global survey finds attacks on DNS, network-layer denial-of-service attacks most frequent and toughest to stop
Security Ostriches And Disintermediation
Commentary  |  11/3/2011  | 
HD Moore's Law (unsophisticated attackers leveraging tools like Metasploit) will make many security professionals go the way of brick-and-mortar retailers
Testing Your Endpoints Against Advanced Threats
Commentary  |  11/2/2011  | 
Why your pen-test efforts probably aren't preparing you for the worst by testing endpoint resilience
Most Execs Don't Feel They Can Secure Cloud Infrastructures
News  |  11/2/2011  | 
Two-thirds of IT pros don't believe cloud environments are as secure as on-premises environments


Attackers Leave Stolen Credentials Searchable on Google
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2021
How to Better Secure Your Microsoft 365 Environment
Kelly Sheridan, Staff Editor, Dark Reading,  1/25/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-21272
PUBLISHED: 2021-01-25
ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI for initial testing and a Go Module. In ORAS from version 0.4.0 and before version 0.9.0, there is a "zip-slip" vulnerability. The directory support feature allows the ...
CVE-2021-23901
PUBLISHED: 2021-01-25
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML ...
CVE-2020-17532
PUBLISHED: 2021-01-25
When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5
CVE-2020-12512
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting
CVE-2020-12513
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.