News & Commentary

Content tagged with Compliance posted in February 2007
Government Targets Insider Threat
News  |  2/28/2007  | 
Defense, Justice, and HUD developing new strategies for stopping internal security leaks
Black Hat Cancels RFID Demo
News  |  2/27/2007  | 
Badge, smartcard patent holder threatens lawsuit over cloning presentation
A Virtual Post-It, Perhaps
News  |  2/26/2007  | 
Keeping all those passwords straight - not to mention secure - can suck up a lot of brain power
Black Hats Focus on Apps
News  |  2/23/2007  | 
DC convention shows security researchers are shifting away from network infrastructure - and toward applications
Top 10 Admin Passwords to Avoid
News  |  2/22/2007  | 
Don't want hackers to guess the password for that critical server or application? Stay away from these
Cisco's Web Security Play
News  |  2/21/2007  | 
Acquisition of Reactivity could pave way to network-based solutions for Web 2.0, SOA
VMs Create Potential Risks
News  |  2/21/2007  | 
Convenient and efficient, virtual machines can also increase your security exposure
Insider Tries to Steal $400 Million at DuPont
News  |  2/16/2007  | 
Unusual computer activity is tipoff in successful case against chemist who tried to steal intellectual property for his new employer
3G Card Secures Laptops
News  |  2/15/2007  | 
3G cellular-based add-on secures data in the event of malware infection, laptop loss, or theft
Are 'Sealed' Websites Any Safer?
News  |  2/9/2007  | 
Website seals are designed to make buyers feel safer. But are sites with seals really more secure?
IBM's Stealthy Security Play
News  |  2/8/2007  | 
After being acquired by IBM in August, ISS is doubling in size, tripling its customer pipeline, and laying the groundwork for a major security push by Big Blue, top exec says
Microsoft Vision Raises Questions
News  |  2/6/2007  | 
Past developments suggest that Microsoft's future security road may be a bumpy ride
NAC: Can't Get No Satisfaction
News  |  2/2/2007  | 
Vendors prepare to shore up the shortcomings of network access control at RSA conference next week
EMC Kicks Off With Security
News  |  2/2/2007  | 
'Robust' product refresh cycle begins, with RSA security built into Symmetrix
To Enter, Act Like Yourself
News  |  2/1/2007  | 
Behavior-based biometrics to ID you by the way you speak, type, move your mouse, and more
Microsoft Debuts VPN Appliance
News  |  2/1/2007  | 
SSL-based Intelligent Application Gateway is latest offering in its Forefront security product line
ID Management: A Matter of Entitlement
News  |  2/1/2007  | 
The need for compliance is driving authorization, integration, and automation in identity management


Worst Password Blunders of 2018 Hit Organizations East and West
Curtis Franklin Jr., Senior Editor at Dark Reading,  12/12/2018
2019 Attacker Playbook
Ericka Chickowski, Contributing Writer, Dark Reading,  12/14/2018
How to Engage Your Cyber Enemies
Guy Nizan, CEO at Intsights Cyber Intelligence,  12/18/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
The Year in Security 2018
This Dark Reading Tech Digest explores the biggest news stories of 2018 that shaped the cybersecurity landscape.
Flash Poll
[Sponsored Content] The State of Encryption and How to Improve It
[Sponsored Content] The State of Encryption and How to Improve It
Encryption and access controls are considered to be the ultimate safeguards to ensure the security and confidentiality of data, which is why they're mandated in so many compliance and regulatory standards. While the cybersecurity market boasts a wide variety of encryption technologies, many data breaches reveal that sensitive and personal data has often been left unencrypted and, therefore, vulnerable.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20228
PUBLISHED: 2018-12-19
Subsonic V6.1.5 allows internetRadioSettings.view streamUrl CSRF, with resultant SSRF.
CVE-2018-20230
PUBLISHED: 2018-12-19
An issue was discovered in PSPP 1.2.0. There is a heap-based buffer overflow at the function read_bytes_internal in utilities/pspp-dump-sav.c, which allows attackers to cause a denial of service (application crash) or possibly have unspecified other impact.
CVE-2018-20231
PUBLISHED: 2018-12-19
Cross Site Request Forgery (CSRF) in the two-factor-authentication plugin before 1.3.13 for WordPress allows remote attackers to disable 2FA via the tfa_enable_tfa parameter due to missing nonce validation.
CVE-2018-20227
PUBLISHED: 2018-12-19
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
CVE-2018-19790
PUBLISHED: 2018-12-18
An open redirect was discovered in Symfony 2.7.x before 2.7.50, 2.8.x before 2.8.49, 3.x before 3.4.20, 4.0.x before 4.0.15, 4.1.x before 4.1.9 and 4.2.x before 4.2.1. By using backslashes in the `_failure_path` input field of login forms, an attacker can work around the redirection target restricti...