Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

News & Commentary

Content tagged with Vulnerabilities / Threats posted in June 2016
<<   <   Page 2 / 2
From Paper To Plastic To Bits
Partner Perspectives  |  6/8/2016  | 
Paying with your phone or other electronic wallets increases transaction security.
Enterprises Still Don't Base Vuln Remediation On Risk
News  |  6/7/2016  | 
New White Hat study shows critical vulnerabilities aren't fixed any faster than other security flaws.
FBI IC3 Cautions Against Tech Support Scams
Quick Hits  |  6/7/2016  | 
Agency says attackers dupe victims into handing over remote device access and thousands of dollars.
How To Prepare For A Data Breach
Slideshows  |  6/7/2016  | 
These five from-the-trenches strategies will help you win the fight against today's sophisticated, conniving attackers.
Microsegmentation & The Need For An Intelligent Attack Surface
Commentary  |  6/7/2016  | 
There is a fundamental difference in the security posture and technology for protecting the White House versus a Social Security office in California. So, too, for the critical apps and systems that are likely targets in your enterprise.
Top Security To-Dos For The Entertainment Industry
News  |  6/6/2016  | 
'The biz' has unique security needs. And it isn't only about preventing 'the next Sony.'
How Many Layers Does Your Email Security Need?
News  |  6/6/2016  | 
At least one more layer than the attacker can defeat. Heres how to improve your odds by turning on little-used or newer capabilities to block email-targeted malware.
Researchers Demo How To Build Nearly Invisible Backdoor In Computer Chips
News  |  6/6/2016  | 
Modification almost impossible to catch in post-fab tests says University of Michigan researchers in report that details proof-of-concept attack
How Risky Is Bleeding Edge Tech?
Slideshows  |  6/5/2016  | 
Experts with the Carnegie Mellon University Software Engineering Institute rate 10 up-and-coming technologies for risk.
Less Than 10% Of IoT Products Secure, Say 47% Surveyed
Quick Hits  |  6/3/2016  | 
IOActive poll highlights low consumer confidence in the built-in security of Internet of Things products.
BYOD Security: How To Shift Device Control & Grant Users More Choice
Commentary  |  6/3/2016  | 
Gartners managed diversity model offers an ITIL-compliant information security solution to the problem of Shadow IT.
Connected Cars: 6 Tips For Riding Safely With Onboard Devices
Slideshows  |  6/3/2016  | 
Carnegie Mellon researchers note that the cheaper the after market device, the easier it can be hacked.
Ransomware Scam Profits Not As 'Glamorous' As You'd Think
News  |  6/2/2016  | 
Bosses typically make about $90K a year, affiliates much less, Flashpoint study finds.
How Facebook Raises A Generation Of Intelligence Analysts
Commentary  |  6/2/2016  | 
In the process of creating and administering groups, users learn how to read data points, create a risk profile in their head, and watch for changes over time.
More Evidence Of Link Between Bank Attacks And North Korean Group
News  |  6/1/2016  | 
Anomali says it has found five new pieces of malware tying the two attack groups together.
Ransomware Domains Up By 3,500% In Q1
News  |  6/1/2016  | 
Cybercriminals know a good thing when they see it.
How Agile Changed Security At Dun & Bradstreet
Commentary  |  6/1/2016  | 
Chief Security Officer Jon Rose shares the whys and wherefores of integrating agile software development methodology into a traditional security environment.
<<   <   Page 2 / 2


COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/3/2020
Pen Testers Who Got Arrested Doing Their Jobs Tell All
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/5/2020
New 'Nanodegree' Program Provides Hands-On Cybersecurity Training
Nicole Ferraro, Contributing Writer,  8/3/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Special Report: Computing's New Normal, a Dark Reading Perspective
This special report examines how IT security organizations have adapted to the "new normal" of computing and what the long-term effects will be. Read it and get a unique set of perspectives on issues ranging from new threats & vulnerabilities as a result of remote working to how enterprise security strategy will be affected long term.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-15058
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.
CVE-2020-15059
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to bypass authentication via a web-administration request that lacks a password parameter.
CVE-2020-15060
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to conduct persistent XSS attacks by leveraging administrative privileges to set a crafted server name.
CVE-2020-15061
PUBLISHED: 2020-08-07
Lindy 42633 4-Port USB 2.0 Gigabit Network Server 2.078.000 devices allow an attacker on the same network to denial-of-service the device via long input values.
CVE-2020-15062
PUBLISHED: 2020-08-07
DIGITUS DA-70254 4-Port Gigabit Network Hub 2.073.000.E0008 devices allow an attacker on the same network to elevate privileges because the administrative password can be discovered by sniffing unencrypted UDP traffic.