Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in February 2012
It's True: Compliance Can Be Good For Your Business
Commentary  |  2/29/2012  | 
The best insurance for your organization is often the processes required for compliance
Bots: Stand Up And Be Counted
Commentary  |  2/24/2012  | 
A new FCC-backed initiative will gather real ISP data on infected bot machines, but will it make a dent on the botnet scourge?
Web Encryption That Works
News  |  2/23/2012  | 
SSL technology isn't perfect, but it can be an effective security tool for your organization. Here are four tips for optimizing its performance
Five Dangerous Compliance Assumptions
Commentary  |  2/23/2012  | 
Many businesses fool themselves about their compliance problems
Another Hurdle For IPsec
News  |  2/14/2012  | 
Some organizations are taking a second look at IPsec for more security, but, like SSL, it also relies on a flawed trust model
Being A Security Bully Does Not Make You Compliant
Commentary  |  2/14/2012  | 
Compliance is not a tool for dodging work or dismissing business needs
Avoid Putting IT In A GRC Vacuum
News  |  2/13/2012  | 
When infosec pros are asked to set security and compliance policies with no line-of-business input, problems are inevitable
Five Tactical Security Metrics To Watch
News  |  2/10/2012  | 
Wondering how secure the corporate network is? Here's five operational security metrics that can help. First of a two-part series
'Factory Outlets' Selling Stolen Facebook, Twitter Credentials At Discount Rates
News  |  2/8/2012  | 
Are cybercriminals' inventory overstocked? New bulk sales pitch could be an indication, researchers say
Slide Show: Technologies That Are Changing The Sports Security Game
News  |  2/3/2012  | 
Digital technology is increasingly playing a major role in sports security operations
Compliance And 'The Little Guys'
Commentary  |  2/3/2012  | 
Small and midsize businesses often let the cost of compliance obscure important benefits
How To Spot A Fake Facebook Profile
Quick Hits  |  2/2/2012  | 
Barracuda Networks gathers telltale characteristics of the phony Facebook 'Friend'


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-45909
PUBLISHED: 2022-11-26
drachtio-server 0.8.18 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-45907
PUBLISHED: 2022-11-26
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908
PUBLISHED: 2022-11-26
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-44843
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44844
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.