Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in February 2007
Government Targets Insider Threat
News  |  2/28/2007  | 
Defense, Justice, and HUD developing new strategies for stopping internal security leaks
Black Hat Cancels RFID Demo
News  |  2/27/2007  | 
Badge, smartcard patent holder threatens lawsuit over cloning presentation
A Virtual Post-It, Perhaps
News  |  2/26/2007  | 
Keeping all those passwords straight - not to mention secure - can suck up a lot of brain power
Black Hats Focus on Apps
News  |  2/23/2007  | 
DC convention shows security researchers are shifting away from network infrastructure - and toward applications
Top 10 Admin Passwords to Avoid
News  |  2/22/2007  | 
Don't want hackers to guess the password for that critical server or application? Stay away from these
Cisco's Web Security Play
News  |  2/21/2007  | 
Acquisition of Reactivity could pave way to network-based solutions for Web 2.0, SOA
VMs Create Potential Risks
News  |  2/21/2007  | 
Convenient and efficient, virtual machines can also increase your security exposure
Insider Tries to Steal $400 Million at DuPont
News  |  2/16/2007  | 
Unusual computer activity is tipoff in successful case against chemist who tried to steal intellectual property for his new employer
3G Card Secures Laptops
News  |  2/15/2007  | 
3G cellular-based add-on secures data in the event of malware infection, laptop loss, or theft
Are 'Sealed' Websites Any Safer?
News  |  2/9/2007  | 
Website seals are designed to make buyers feel safer. But are sites with seals really more secure?
IBM's Stealthy Security Play
News  |  2/8/2007  | 
After being acquired by IBM in August, ISS is doubling in size, tripling its customer pipeline, and laying the groundwork for a major security push by Big Blue, top exec says
Microsoft Vision Raises Questions
News  |  2/6/2007  | 
Past developments suggest that Microsoft's future security road may be a bumpy ride
NAC: Can't Get No Satisfaction
News  |  2/2/2007  | 
Vendors prepare to shore up the shortcomings of network access control at RSA conference next week
EMC Kicks Off With Security
News  |  2/2/2007  | 
'Robust' product refresh cycle begins, with RSA security built into Symmetrix
To Enter, Act Like Yourself
News  |  2/1/2007  | 
Behavior-based biometrics to ID you by the way you speak, type, move your mouse, and more
Microsoft Debuts VPN Appliance
News  |  2/1/2007  | 
SSL-based Intelligent Application Gateway is latest offering in its Forefront security product line
ID Management: A Matter of Entitlement
News  |  2/1/2007  | 
The need for compliance is driving authorization, integration, and automation in identity management


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-45909
PUBLISHED: 2022-11-26
drachtio-server 0.8.18 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-45907
PUBLISHED: 2022-11-26
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908
PUBLISHED: 2022-11-26
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-44843
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44844
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.