Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in June 2011
Up-And-Coming Botnet Uses Same Malware Kit As Defunct Mariposa
News  |  6/29/2011  | 
'Butterfly bot' kit steals financial information, but its licensing model could ultimately lead authorities to its newest botmasters
LulzSec Went After Qakbot, Mariposa Bots
News  |  6/28/2011  | 
Meanwhile, Anonymous offering bot-herding, other hacker training for its recruits via IRC, security expert says
New Chubb Service Helps Businesses Minimize Fallout From Data Breach
News  |  6/28/2011  | 
Service is available through eRisk Hub
Former College Kid's Guilty Plea To Hacking Highlights Low-Tech DB Theft
News  |  6/24/2011  | 
Defendants targeted university's databases of faculty, staff, alumni, and student information, and financial accounts with a social engineering scheme that used poisoned USBs, phishing emails
Two Fake AV Rings Busted By FBI In 'Operation Trident Tribunal'
Quick Hits  |  6/23/2011  | 
Reports out of the Ukraine appear to indicate that the Conficker worm might have been one of the vehicles for spreading the scareware
Spear Phishers Aiming At SMBs
News  |  6/22/2011  | 
Pilfered email addresses and personal information from Epsilon and Sony breaches will make attacks on SMBs even more likely
Breach Patrol: When Should Customers Be Told?
News  |  6/17/2011  | 
Speed of notifications seems to be a key question now
Russian Company Tests ATM That Can Detect Faces, Lies
Quick Hits  |  6/10/2011  | 
Souped-up authentication includes voice recognition, facial recognition -- and a lie detector
Court Ruling Puts Security Burden On SMBs, Not Banks
News  |  6/8/2011  | 
Security experts cry foul in U.S. District Court ruling in $500,000 online bank account heist from construction firm
Replacing RSA SecurID Tokens Not So Simple
News  |  6/7/2011  | 
There are plenty of in-house logistics -- and no guarantees that the new tokens won't be eventually compromised, security experts say
Google Reveals Attack On Gmail
Quick Hits  |  6/3/2011  | 
Hundreds of personal accounts, including those of senior U.S. government officials, are affected
For Malware Developers, Mac Moves From Safe Zone To Target Zone
News  |  6/1/2011  | 
Growth of mobile devices, shortage of strong defenses make Apple look appetizing to authors of malicious code


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Creating an Effective Incident Response Plan
Security teams are realizing their organizations will experience a cyber incident at some point. An effective incident response plan that takes into account their specific requirements and has been tested is critical. This issue of Tech Insights also includes: -a look at the newly signed cyber-incident law, -how organizations can apply behavioral psychology to incident response, -and an overview of the Open Cybersecurity Schema Framework.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-45909
PUBLISHED: 2022-11-26
drachtio-server 0.8.18 has a heap-based buffer over-read via a long Request-URI in an INVITE request.
CVE-2022-45907
PUBLISHED: 2022-11-26
In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
CVE-2022-45908
PUBLISHED: 2022-11-26
In PaddlePaddle before 2.4, paddle.audio.functional.get_window is vulnerable to code injection because it calls eval on a user-supplied winstr. This may lead to arbitrary code execution.
CVE-2022-44843
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the port parameter in the setting/setOpenVpnClientCfg function.
CVE-2022-44844
PUBLISHED: 2022-11-25
TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the pass parameter in the setting/setOpenVpnCfg function.