News & Commentary

Content tagged with Compliance posted in October 2007
Researcher: Vonage Vulnerable
News  |  10/26/2007  | 
Popular VOIP service could be subject to spoofing, eavesdropping, and denial of service, Sipera warns
Sprint Adds Laptop Security to Mobile Broadband
News  |  10/25/2007  | 
Wireless carrier is first to distribute Alcatel-Lucent's Laptop Guardian connection card
Is NAC Dying?
News  |  10/24/2007  | 
Frustrated with complexity and cost, many enterprises are retrenching their NAC strategies
Upstart Takes New Tack on Digital Signatures
News  |  10/22/2007  | 
TriCipher's new MySignatureBook enables multiple signers to authorize a single document electronically
Phishing's Future Scapegoats
News  |  10/17/2007  | 
If they don't act soon, frequently-phished companies may be held liable for crimes committed in their names
Wolves in IT Administrators' Clothing?
News  |  10/16/2007  | 
Enterprises, vendors move to safeguard their systems from rogue systems administrators
eBay, PayPal Phishing Exploits Plummet
Quick Hits  |  10/16/2007  | 
Sophos says 21 percent of phishing emails target eBay and PayPal, down from 85 percent last year
Schwarzenegger Terminates CA Retail Data Security Law
News  |  10/15/2007  | 
Minnesota remains only state to outlaw retention of credit card data
Obstacles Nick NAC, But Growth Continues
News  |  10/12/2007  | 
Most companies are getting network access control, but cost and lack of integration still are pain points
IGN Locks Down Endpoints
News  |  10/12/2007  | 
IGN Entertainment uses technology from Bit9 to control what its end users can access - and what they can't
Former IT Admin Convicted of Sabotage
News  |  10/11/2007  | 
Disgruntled staffer faces 10 years in jail after destroying payroll and HR files at Pentastar
Experts: Security Flaws Vary on Social Networking Sites
News  |  10/10/2007  | 
Though often lumped together, MySpace, Facebook, and LinkedIn each have their own security weaknesses
FTC Comes Down Hard on Spammers
News  |  10/10/2007  | 
In separate cases, agency slaps complaints on defendants for identity trafficking, bogus product claims
Are Hackers Piggybacking on Your Wireless Modem?
Quick Hits  |  10/3/2007  | 
UK wireless service provider warns 250,000 customers of modem flaw
Web Hack Exposes Personal Data of 14,000 At Nature Conservancy
News  |  10/2/2007  | 
Attacker accessed data via malware attached to association Website


Crowdsourced vs. Traditional Pen Testing
Alex Haynes, Chief Information Security Officer, CDL,  3/19/2019
BEC Scammer Pleads Guilty
Dark Reading Staff 3/20/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
The State of Cyber Security Incident Response
The State of Cyber Security Incident Response
Organizations are responding to new threats with new processes for detecting and mitigating them. Here's a look at how the discipline of incident response is evolving.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20031
PUBLISHED: 2019-03-21
A Denial of Service vulnerability related to preemptive item deletion in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor ...
CVE-2018-20032
PUBLISHED: 2019-03-21
A Denial of Service vulnerability related to message decoding in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor daemon t...
CVE-2018-20034
PUBLISHED: 2019-03-21
A Denial of Service vulnerability related to adding an item to a list in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier allows a remote attacker to send a combination of messages to lmgrd or the vendor daemon, causing the heartbeat between lmgrd and the vendor ...
CVE-2019-3855
PUBLISHED: 2019-03-21
An integer overflow flaw which could lead to an out of bounds write was discovered in libssh2 before 1.8.1 in the way packets are read from the server. A remote attacker who compromises a SSH server may be able to execute code on the client system when a user connects to the server.
CVE-2019-3858
PUBLISHED: 2019-03-21
An out of bounds read flaw was discovered in libssh2 before 1.8.1 when a specially crafted SFTP packet is received from the server. A remote attacker who compromises a SSH server may be able to cause a Denial of Service or read data in the client memory.