Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in October 2007
Researcher: Vonage Vulnerable
News  |  10/26/2007  | 
Popular VOIP service could be subject to spoofing, eavesdropping, and denial of service, Sipera warns
Sprint Adds Laptop Security to Mobile Broadband
News  |  10/25/2007  | 
Wireless carrier is first to distribute Alcatel-Lucent's Laptop Guardian connection card
Is NAC Dying?
News  |  10/24/2007  | 
Frustrated with complexity and cost, many enterprises are retrenching their NAC strategies
Upstart Takes New Tack on Digital Signatures
News  |  10/22/2007  | 
TriCipher's new MySignatureBook enables multiple signers to authorize a single document electronically
Phishing's Future Scapegoats
News  |  10/17/2007  | 
If they don't act soon, frequently-phished companies may be held liable for crimes committed in their names
Wolves in IT Administrators' Clothing?
News  |  10/16/2007  | 
Enterprises, vendors move to safeguard their systems from rogue systems administrators
eBay, PayPal Phishing Exploits Plummet
Quick Hits  |  10/16/2007  | 
Sophos says 21 percent of phishing emails target eBay and PayPal, down from 85 percent last year
Schwarzenegger Terminates CA Retail Data Security Law
News  |  10/15/2007  | 
Minnesota remains only state to outlaw retention of credit card data
Obstacles Nick NAC, But Growth Continues
News  |  10/12/2007  | 
Most companies are getting network access control, but cost and lack of integration still are pain points
IGN Locks Down Endpoints
News  |  10/12/2007  | 
IGN Entertainment uses technology from Bit9 to control what its end users can access - and what they can't
Former IT Admin Convicted of Sabotage
News  |  10/11/2007  | 
Disgruntled staffer faces 10 years in jail after destroying payroll and HR files at Pentastar
Experts: Security Flaws Vary on Social Networking Sites
News  |  10/10/2007  | 
Though often lumped together, MySpace, Facebook, and LinkedIn each have their own security weaknesses
FTC Comes Down Hard on Spammers
News  |  10/10/2007  | 
In separate cases, agency slaps complaints on defendants for identity trafficking, bogus product claims
Are Hackers Piggybacking on Your Wireless Modem?
Quick Hits  |  10/3/2007  | 
UK wireless service provider warns 250,000 customers of modem flaw
Web Hack Exposes Personal Data of 14,000 At Nature Conservancy
News  |  10/2/2007  | 
Attacker accessed data via malware attached to association Website


Attackers Leave Stolen Credentials Searchable on Google
Kelly Sheridan, Staff Editor, Dark Reading,  1/21/2021
How to Better Secure Your Microsoft 365 Environment
Kelly Sheridan, Staff Editor, Dark Reading,  1/25/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-23901
PUBLISHED: 2021-01-25
An XML external entity (XXE) injection vulnerability was discovered in the Nutch DmozParser and is known to affect Nutch versions < 1.18. XML external entity injection (also known as XXE) is a web security vulnerability that allows an attacker to interfere with an application's processing of XML ...
CVE-2020-17532
PUBLISHED: 2021-01-25
When handler-router component is enabled in servicecomb-java-chassis, authenticated user may inject some data and cause arbitrary code execution. The problem happens in versions between 2.0.0 ~ 2.1.3 and fixed in Apache ServiceComb-Java-Chassis 2.1.5
CVE-2020-12512
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated reflected POST Cross-Site Scripting
CVE-2020-12513
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to an authenticated blind OS Command Injection.
CVE-2020-12514
PUBLISHED: 2021-01-22
Pepperl+Fuchs Comtrol IO-Link Master in Version 1.5.48 and below is prone to a NULL Pointer Dereference that leads to a DoS in discoveryd