Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Compliance posted in June 2011
Up-And-Coming Botnet Uses Same Malware Kit As Defunct Mariposa
News  |  6/29/2011  | 
'Butterfly bot' kit steals financial information, but its licensing model could ultimately lead authorities to its newest botmasters
LulzSec Went After Qakbot, Mariposa Bots
News  |  6/28/2011  | 
Meanwhile, Anonymous offering bot-herding, other hacker training for its recruits via IRC, security expert says
New Chubb Service Helps Businesses Minimize Fallout From Data Breach
News  |  6/28/2011  | 
Service is available through eRisk Hub
Former College Kid's Guilty Plea To Hacking Highlights Low-Tech DB Theft
News  |  6/24/2011  | 
Defendants targeted university's databases of faculty, staff, alumni, and student information, and financial accounts with a social engineering scheme that used poisoned USBs, phishing emails
Two Fake AV Rings Busted By FBI In 'Operation Trident Tribunal'
Quick Hits  |  6/23/2011  | 
Reports out of the Ukraine appear to indicate that the Conficker worm might have been one of the vehicles for spreading the scareware
Spear Phishers Aiming At SMBs
News  |  6/22/2011  | 
Pilfered email addresses and personal information from Epsilon and Sony breaches will make attacks on SMBs even more likely
Breach Patrol: When Should Customers Be Told?
News  |  6/17/2011  | 
Speed of notifications seems to be a key question now
Russian Company Tests ATM That Can Detect Faces, Lies
Quick Hits  |  6/10/2011  | 
Souped-up authentication includes voice recognition, facial recognition -- and a lie detector
Court Ruling Puts Security Burden On SMBs, Not Banks
News  |  6/8/2011  | 
Security experts cry foul in U.S. District Court ruling in $500,000 online bank account heist from construction firm
Replacing RSA SecurID Tokens Not So Simple
News  |  6/7/2011  | 
There are plenty of in-house logistics -- and no guarantees that the new tokens won't be eventually compromised, security experts say
Google Reveals Attack On Gmail
Quick Hits  |  6/3/2011  | 
Hundreds of personal accounts, including those of senior U.S. government officials, are affected
For Malware Developers, Mac Moves From Safe Zone To Target Zone
News  |  6/1/2011  | 
Growth of mobile devices, shortage of strong defenses make Apple look appetizing to authors of malicious code


COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/3/2020
Pen Testers Who Got Arrested Doing Their Jobs Tell All
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/5/2020
New 'Nanodegree' Program Provides Hands-On Cybersecurity Training
Nicole Ferraro, Contributing Writer,  8/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-15058
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
CVE-2020-15059
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
CVE-2020-15060
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
CVE-2020-15061
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values.
CVE-2020-15062
PUBLISHED: 2020-08-07
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.