News & Commentary

Content tagged with Compliance posted in September 2008
Study: Routine Misbehavior by End Users Can Lead to Major Data Leaks
News  |  9/30/2008  | 
Many end users don't understand the risks associated with breaking company security policies, report says
Yahoo! Japan Auctions Compromised, Report Says
News  |  9/29/2008  | 
Thieves may have accessed Web auction site as many as 1.5 million times since May
New ID Theft Service Crawls the Web on Consumers' Behalf
News  |  9/26/2008  | 
For $15, Affinion penetrates hacker chat rooms and warns users when their data is for sale
Laptops Stolen From DHS Transportation Worker ID Program Office
Quick Hits  |  9/25/2008  | 
TSA's New Haven, Conn., office was broken into over the weekend and two laptops that handle applications for new biometric IDs for port workers were stolen
Free 'Trojan-Proof' Password Tool Released for Windows
News  |  9/17/2008  | 
Beta virtual keyboard software aims to ward off password-sniffing Trojans, malware
Enterprises Gearing Up for Identity, Compliance Management Next Year
News  |  9/16/2008  | 
Security event management, database security also rank high among near-term plans
Study: Hotel Networks Put Corporate Users at Risk
News  |  9/12/2008  | 
The Center for Hospitality Research's survey and hack confirms worries of weak security on hotel networks
New 'On/Off Switch' Protects RFID Cards From Hacks
News  |  9/11/2008  | 
Technology would let cardholders activate RFID transmission only when card goes through a reader
Flying Phish Hooks Schools of Employees
News  |  9/11/2008  | 
Penetration test proves many workers can still be easily fooled
Most Companies Believe Their Sensitive Data Is at Risk
Quick Hits  |  9/10/2008  | 
Enterprises recognize the threat of data theft, Finjan research study says
'Password Recovery' Services May Be Hackers for Hire
News  |  9/10/2008  | 
Services that promise to help you find your lost passwords may make their living by cracking the passwords of others, IBM researcher says
Cisco Packages Home Office Security
News  |  9/9/2008  | 
Cisco Virtual Office promises to ease installation, administration of secure telecommuter links
What You Really Need to Know About Data Leak Prevention
News  |  9/5/2008  | 
Forrester analyst Thomas Raschke cuts through the hype to answer some of the FAQs about emerging DLP technology


6 Ways Greed Has a Negative Effect on Cybersecurity
Joshua Goldfarb, Co-founder & Chief Product Officer, IDRRA ,  6/11/2018
Weaponizing IPv6 to Bypass IPv4 Security
John Anderson, Principal Security Consultant, Trustwave Spiderlabs,  6/12/2018
'Shift Left' & the Connected Car
Rohit Sethi, COO of Security Compass,  6/12/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-12026
PUBLISHED: 2018-06-17
During the spawning of a malicious Passenger-managed application, SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows such applications to replace key files or directories in the spawning communication directory with symlinks. This then could result in arbitrary reads and writes, which in tur...
CVE-2018-12027
PUBLISHED: 2018-06-17
An Insecure Permissions vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 causes information disclosure in the following situation: given a Passenger-spawned application process that reports that it listens on a certain Unix domain socket, if any of the parent directories of said ...
CVE-2018-12028
PUBLISHED: 2018-06-17
An Incorrect Access Control vulnerability in SpawningKit in Phusion Passenger 5.3.x before 5.3.2 allows a Passenger-managed malicious application, upon spawning a child process, to report an arbitrary different PID back to Passenger's process manager. If the malicious application then generates an e...
CVE-2018-12029
PUBLISHED: 2018-06-17
A race condition in the nginx module in Phusion Passenger 3.x through 5.x before 5.3.2 allows local escalation of privileges when a non-standard passenger_instance_registry_dir with insufficiently strict permissions is configured. Replacing a file with a symlink after the file was created, but befor...
CVE-2018-12071
PUBLISHED: 2018-06-17
A Session Fixation issue exists in CodeIgniter before 3.1.9 because session.use_strict_mode in the Session Library was mishandled.