News & Commentary

Content tagged with Compliance posted in October 2010
Bots Hard To Kill -- Even When Botnets Get Decapitated
News  |  10/15/2010  | 
Despite the wave of major takedowns this past year, botnets are still thriving with a seemingly endless supply of bots available to feed the beast
Proof Of Identity: How To Choose Multifactor Authentication
News  |  10/14/2010  | 
Choosing the right Web authentication method means weighing cost vs. risk
University Researchers Develop New Technology To Trace Fraudulent Voice Calls
Quick Hits  |  10/7/2010  | 
Georgia Tech development could help tag 'vishing' calls and separate them from legitimate phone traffic
'Man In The Mobile' Attacks Highlight Weaknesses In Out-Of-Band Authentication
News  |  10/5/2010  | 
New exploits circumvent efforts by banks, other businesses to verify users' identities via SMS text


'PowerSnitch' Hacks Androids via Power Banks
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/8/2018
Higher Education: 15 Books to Help Cybersecurity Pros Be Better
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-6705
PUBLISHED: 2018-12-12
Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.
CVE-2018-15717
PUBLISHED: 2018-12-12
Open Dental before version 18.4 stores user passwords as base64 encoded MD5 hashes.
CVE-2018-15718
PUBLISHED: 2018-12-12
Open Dental before version 18.4 transmits the entire user database over the network when a remote unathenticated user accesses the command prompt. This allows the attacker to gain access to usernames, password hashes, privilege levels, and more.
CVE-2018-15719
PUBLISHED: 2018-12-12
Open Dental before version 18.4 installs a mysql database and uses the default credentials of "root" with a blank password. This allows anyone on the network with access to the server to access all database information.
CVE-2018-6704
PUBLISHED: 2018-12-12
Privilege escalation vulnerability in McAfee Agent (MA) for Linux 5.0.0 through 5.0.6, 5.5.0, and 5.5.1 allows local users to perform arbitrary command execution via specific conditions.