News & Commentary

Content tagged with Compliance posted in April 2009
Microsoft Alters Windows AutoRun Amid Conficker Concerns
News  |  4/29/2009  | 
As Conficker shows no signs of going away, software giant makes worm tougher to spread via USB
Many Users Say They'd Sell Company Data For The Right Price
Quick Hits  |  4/24/2009  | 
In subway survey, 37 percent of workers say they could be bought
Poll: 65% Of Consumers Want Local Government To Do More About Cybercrime
Quick Hits  |  4/23/2009  | 
Cybercrime considered "serious" by 70 percent of U.S. adults
Microsoft Details Windows 7 Security
Quick Hits  |  4/22/2009  | 
Features in upcoming OS reflect Microsoft's strategy of end-to-end trust
Cloakware Survey: Acceptable Security Controls A Rarity
News  |  4/8/2009  | 
Most companies rely on antiquated security procedures that don't account for widespread corporate layoffs or the realities of a more virtual workforce, according to study of 12,500 U.S. infosec pros
Survey: Small Firms Recognize Insider Risk, But Don't Act
News  |  4/8/2009  | 
Symantec report finds most breaches at small to midsize businesses caused by people, not malware


'Hidden Tunnels' Help Hackers Launch Financial Services Attacks
Kelly Sheridan, Staff Editor, Dark Reading,  6/20/2018
Tesla Employee Steals, Sabotages Company Data
Jai Vijayan, Freelance writer,  6/19/2018
Inside a SamSam Ransomware Attack
Ajit Sancheti, CEO and Co-Founder, Preempt,  6/20/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-7682
PUBLISHED: 2018-06-22
Micro Focus Solutions Business Manager versions prior to 11.4 allows a user to invoke SBM RESTful services across domains.
CVE-2018-12689
PUBLISHED: 2018-06-22
phpLDAPadmin 1.2.2 allows LDAP injection via a crafted server_id parameter in a cmd.php?cmd=login_form request, or a crafted username and password in the login panel.
CVE-2018-12538
PUBLISHED: 2018-06-22
In Eclipse Jetty versions 9.4.0 through 9.4.8, when using the optional Jetty provided FileSessionDataStore for persistent storage of HttpSession details, it is possible for a malicious user to access/hijack other HttpSessions and even delete unmatched HttpSessions present in the FileSystem's storage...
CVE-2018-12684
PUBLISHED: 2018-06-22
Out-of-bounds Read in the send_ssi_file function in civetweb.c in CivetWeb through 1.10 allows attackers to cause a Denial of Service or Information Disclosure via a crafted SSI file.
CVE-2018-12687
PUBLISHED: 2018-06-22
tinyexr 0.9.5 has an assertion failure in DecodePixelData in tinyexr.h.