Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in June 2007
CSRF Bug Runs Rampant
News  |  6/26/2007  | 
Vulnerabilty found in Check Point, various firewalls, UTM appliances, routers, storage systems, and other devices managed with Web interfaces
Killing That 'Man in the Browser'
News  |  6/26/2007  | 
TriCipher to unveil transaction security tool today
Hacking Truckers
News  |  6/25/2007  | 
Researchers discover that the contents of a truck's haul are wide open to hackers via RFID
'You're Now Free to Move About the Company'
News  |  6/21/2007  | 
American Airlines pilots discover major vulnerability in company's intranet
People, Not Passwords, Are the Problem
News  |  6/20/2007  | 
UK government study says end users still don't know how to protect their passwords online
PatchLink Buys SecureWave
News  |  6/19/2007  | 
Deal merges endpoint security with patch management, vulnerability assessment
Stonesoft Seeks to Open Up VPNs
News  |  6/18/2007  | 
New SSL VPN products don't discriminate against mobile devices, non-employees
Server Room Follies
News  |  6/18/2007  | 
In which pizza and soda are shown to be more powerful than a crowbar for breaking and entering
A New Approach to Database Security
News  |  6/15/2007  | 
Startup Sentrigo prepares to launch Hedgehog, a new tool that works at the cache memory level
Eight Vulnerabilities You May Have Missed
News  |  6/15/2007  | 
With all the security vulnerabilities in the news, here's a look at some dangers that few are talking about
Survey: 1 in 4 WLANs Unsecured
News  |  6/13/2007  | 
RSA survey finds more WLANs, but not much security
Authentication Goes USB Route
News  |  6/13/2007  | 
TriCipher to debut smart drive-based, multi-factor authentication for $2 to $3 per user
Pfizer Falls Victim to P2P Hack
News  |  6/12/2007  | 
Attackers access personal information on 17,000 employees via laptop vulnerability
Architect's Many Identities
News  |  6/11/2007  | 
Dale Olds, creator of Novell's eDirectory, talks open-source ID, tuba photography, and how not to configure your home firewall
Attackers Break Into UVA Database
News  |  6/11/2007  | 
Personal data on nearly 6,000 former and current faculty members at the University of Virginia was compromised
P2P's Unintended Leaks
News  |  6/8/2007  | 
Or, how file-hungry music and video fans might download business-sensitive data
Security's Soft Underbelly
News  |  6/5/2007  | 
Many companies secure the walls, but databases remain the soft, chewy center
EMC Secures Verid
News  |  6/4/2007  | 
Vendor continues its security spending tear, picking up authentication specialist Verid


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-45909
PUBLISHED: 2022-11-26
drachtio-server 0.8.18 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-45907
PUBLISHED: 2022-11-26
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908
PUBLISHED: 2022-11-26
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-44843
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44844
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.