Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in December 2009
Twitter Acquires GeoAPI Creator Mixer Labs
News  |  12/24/2009  | 
Software allows users to map their Twitter posts to specific locations, though some worry about privacy
Smartphone Security Startup Offers Free Beta
News  |  12/21/2009  | 
Product to mix lightweight mobile client with cloud-based security, backup, and anti-theft features
Product Watch: IBM Replaces Passwords With Palm-Vein Biometrics In Single Sign-On
News  |  12/17/2009  | 
Fujitsu's PalmSecure LOGONDIRECTOR is integrated with IBM Tivoli Access Manager for Single Sign-On
Shadowserver Global Data Shows 'No One Is Immune' From Conficker
Quick Hits  |  12/16/2009  | 
Russia, U.S., and Ukraine are home to highest numbers of Conficker-infected IP addresses
Old-School Botnet Still Thriving
Quick Hits  |  12/11/2009  | 
New Trend Micro report details how IRC-based SDBOT is going strong with a new mission
Droid Smartphone Hacked
News  |  12/10/2009  | 
Exploit lets phone users gain administrative root access to Google Android-based phones
Microsoft Targets Enterprise Endpoint With New Products
News  |  12/3/2009  | 
New Web gateway leverages the cloud, and remote access gateway draws on identity
US-CERT Warns Of VPN Attack That Bypasses Browser Security
Quick Hits  |  12/1/2009  | 
SSL VPN products from Cisco, Juniper Networks, SafeNet, and SonicWALL all vulnerable to attack that has "no solution"


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-45909
PUBLISHED: 2022-11-26
drachtio-server 0.8.18 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-45907
PUBLISHED: 2022-11-26
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908
PUBLISHED: 2022-11-26
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-44843
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44844
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.