News & Commentary

Content tagged with Compliance posted in June 2007
CSRF Bug Runs Rampant
News  |  6/26/2007  | 
Vulnerabilty found in Check Point, various firewalls, UTM appliances, routers, storage systems, and other devices managed with Web interfaces
Killing That 'Man in the Browser'
News  |  6/26/2007  | 
TriCipher to unveil transaction security tool today
Hacking Truckers
News  |  6/25/2007  | 
Researchers discover that the contents of a truck's haul are wide open to hackers via RFID
'You're Now Free to Move About the Company'
News  |  6/21/2007  | 
American Airlines pilots discover major vulnerability in company's intranet
People, Not Passwords, Are the Problem
News  |  6/20/2007  | 
UK government study says end users still don't know how to protect their passwords online
PatchLink Buys SecureWave
News  |  6/19/2007  | 
Deal merges endpoint security with patch management, vulnerability assessment
Stonesoft Seeks to Open Up VPNs
News  |  6/18/2007  | 
New SSL VPN products don't discriminate against mobile devices, non-employees
Server Room Follies
News  |  6/18/2007  | 
In which pizza and soda are shown to be more powerful than a crowbar for breaking and entering
A New Approach to Database Security
News  |  6/15/2007  | 
Startup Sentrigo prepares to launch Hedgehog, a new tool that works at the cache memory level
Eight Vulnerabilities You May Have Missed
News  |  6/15/2007  | 
With all the security vulnerabilities in the news, here's a look at some dangers that few are talking about
Survey: 1 in 4 WLANs Unsecured
News  |  6/13/2007  | 
RSA survey finds more WLANs, but not much security
Authentication Goes USB Route
News  |  6/13/2007  | 
TriCipher to debut smart drive-based, multi-factor authentication for $2 to $3 per user
Pfizer Falls Victim to P2P Hack
News  |  6/12/2007  | 
Attackers access personal information on 17,000 employees via laptop vulnerability
Architect's Many Identities
News  |  6/11/2007  | 
Dale Olds, creator of Novell's eDirectory, talks open-source ID, tuba photography, and how not to configure your home firewall
Attackers Break Into UVA Database
News  |  6/11/2007  | 
Personal data on nearly 6,000 former and current faculty members at the University of Virginia was compromised
P2P's Unintended Leaks
News  |  6/8/2007  | 
Or, how file-hungry music and video fans might download business-sensitive data
Security's Soft Underbelly
News  |  6/5/2007  | 
Many companies secure the walls, but databases remain the soft, chewy center
EMC Secures Verid
News  |  6/4/2007  | 
Vendor continues its security spending tear, picking up authentication specialist Verid


'PowerSnitch' Hacks Androids via Power Banks
Kelly Jackson Higgins, Executive Editor at Dark Reading,  12/8/2018
6 CISO Resolutions for 2019
Ericka Chickowski, Contributing Writer, Dark Reading,  12/10/2018
Windows 10 Security Questions Prove Easy for Attackers to Exploit
Kelly Sheridan, Staff Editor, Dark Reading,  12/5/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: New camera 2FA closed loop!
Current Issue
10 Best Practices That Could Reshape Your IT Security Department
This Dark Reading Tech Digest, explores ten best practices that could reshape IT security departments.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-20059
PUBLISHED: 2018-12-11
jaxb/JaxbEngine.java in Pippo 1.11.0 allows XXE.
CVE-2018-20056
PUBLISHED: 2018-12-11
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. There is a stack-based buffer overflow allowing remote attackers to execute arbitrary code without authentication via the goform/formLanguageChange currTime parameter.
CVE-2018-20057
PUBLISHED: 2018-12-11
An issue was discovered in /bin/boa on D-Link DIR-619L Rev.B 2.06B1 and DIR-605L Rev.B 2.12B1 devices. goform/formSysCmd allows remote authenticated users to execute arbitrary OS commands via the sysCmd POST parameter.
CVE-2018-20058
PUBLISHED: 2018-12-11
In Evernote before 7.6 on macOS, there is a local file path traversal issue in attachment previewing, aka MACOSNOTE-28634.
CVE-2018-20050
PUBLISHED: 2018-12-10
Mishandling of an empty string on the Jooan JA-Q1H Wi-Fi camera with firmware 21.0.0.91 allows remote attackers to cause a denial of service (crash and reboot) via the ONVIF GetStreamUri method and GetVideoEncoderConfigurationOptions method.