Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Commentary

Content posted in May 2007
Why Catching The 'Spam King' Won't Save Your In-Box
Commentary  |  5/31/2007  | 
Even if a judge and jury lock up Robert Alan Soloway for the rest of his natural born life, your in-box will still be inundated with tons of offers for HGH, porn, and penny stocks.
Data Security: You're Not Learning From Others' Mistakes
Commentary  |  5/29/2007  | 
As I was catching up on some e-mail last night, I came across a message that's become all too familiar to me. It was textbook: A company was apologizing that one of its laptops had been stolen and that the laptop contained customer account and credit card information. A real yawner, until I considered that this e-mail was delivered to my personal e-mail account and that it was my customer account and credit card info that may have been compromised. Companies just aren't getting the messag
Vegas BBQ -- Burn, PC, Burn
Commentary  |  5/24/2007  | 
Picture a beautiful sunset over the desert, the glow of the Vegas skyline in the distance. Then a towering wave of flames leap into the air that crackles with the heat -- a man just set his computer on fire.
At Interop, Security Talk Is Largely About Network Access Control
Commentary  |  5/23/2007  | 
Here at Interop, there's a lot of focus on security and a lot of that security attention is aimed right at network access control. It's a hot-button topic here. The question plaguing many IT and security managers, though, might be where to get started.
(Missing) Without A Trace: The IBM Tapes
Commentary  |  5/18/2007  | 
Did you read about the missing IBM Tapes? It's almost like another undecipherable episode from "Lost," except it's a car that may have crashed in this case, apparently, and it's tapes that got lost in the aftermath.
The Top 10 Most Influential Security Visionaries Of All Time
Commentary  |  5/17/2007  | 
AT&T chief security officer Ed Amoroso, speaking before a packed auditorium Thursday at his company's cybersecurity conference, wanted to test the collective knowledge of those in the room. How well-studied were they in the visionaries who've had the greatest impact on IT security? Not very well, it turns out, as few could put
Lost Your Data? What's It Worth To You?
Commentary  |  5/16/2007  | 
Should virtue be its own reward when it comes to returning lost data these days? Sharon Gaudin's story about IBM's plea to find lost tapes with sensitive employee data really got me into one of those Stephen Colbert finger-wagging moments.
If An FBI Analyst Can Steal National Secrets, What Are Your Workers Lifting?
Commentary  |  5/15/2007  | 
Looking back on the story about the former Marine and FBI analyst who stole classified information from both the White House and the FBI's own database, I think there are some important lessons to be learned from this one.
A Day In The Life Of Cigna's CISO: 7 Things You Didn't Know
Commentary  |  5/11/2007  | 
I recently visited Cigna chief information security officer Craig Shumard at his company's offices in suburban Connecticut. On a clear, sunny day that slowly melted away the last vestiges of winter -- mostly scattered mounds of snow encrusted with rock and dirt -- across the rolling hills of the employee benefits provider's campus, I got to see firsthand how the security chief at a big-time company operates and interacts with his staff. It was impressive, to say the least.
Why Do Workers Steal Data?
Commentary  |  5/10/2007  | 
I was fascinated by Sharon Gaudin's recent article reporting that 45% of professionals steal data when they leave their jobs. I couldn't help wondering why they do it. A desire to suck up to their new supervisors? A sense of grievance against the company that they're leaving? Or just because they can?
Besieged E-Gold Founder Claims (Not Unconvincingly) To Be Victim Of A Fed Vendetta
Commentary  |  5/2/2007  | 
Bloggers live for feedback to their controversial postings and in this regard, my entry earlier this week about a federal grand jury's decision late last week to indict E Gold Ltd, Gold & Silver Reserve Inc., and the owners of these digital currency businesses on charges of money laundering, conspiracy, and operating an unlicensed money transmitting business did not disappoint. The following day, I recei


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-23087
PUBLISHED: 2023-02-03
An issue was found in MojoJson v1.2.3 allows attackers to execute arbitary code via the destroy function.
CVE-2023-23088
PUBLISHED: 2023-02-03
Buffer OverFlow Vulnerability in Barenboim json-parser master and v1.1.0 fixed in v1.1.1 allows an attacker to execute arbitrary code via the json_value_parse function.
CVE-2023-0659
PUBLISHED: 2023-02-03
A vulnerability was found in BDCOM 1704-WGL 2.0.6314. It has been classified as critical. This affects an unknown part of the file /param.file.tgz of the component Backup File Handler. The manipulation leads to information disclosure. It is possible to initiate the attack remotely. The identifier VD...
CVE-2023-23086
PUBLISHED: 2023-02-03
Buffer OverFlow Vulnerability in MojoJson v1.2.3 allows an attacker to execute arbitrary code via the SkipString function.
CVE-2021-37519
PUBLISHED: 2023-02-03
Buffer Overflow vulnerability in authfile.c memcached 1.6.9 allows attackers to cause a denial of service via crafted authenticattion file.