Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Commentary

Content posted in May 2007
Why Catching The 'Spam King' Won't Save Your In-Box
Commentary  |  5/31/2007  | 
Even if a judge and jury lock up Robert Alan Soloway for the rest of his natural born life, your in-box will still be inundated with tons of offers for HGH, porn, and penny stocks.
Data Security: You're Not Learning From Others' Mistakes
Commentary  |  5/29/2007  | 
As I was catching up on some e-mail last night, I came across a message that's become all too familiar to me. It was textbook: A company was apologizing that one of its laptops had been stolen and that the laptop contained customer account and credit card information. A real yawner, until I considered that this e-mail was delivered to my personal e-mail account and that it was my customer account and credit card info that may have been compromised. Companies just aren't getting the messag
Vegas BBQ -- Burn, PC, Burn
Commentary  |  5/24/2007  | 
Picture a beautiful sunset over the desert, the glow of the Vegas skyline in the distance. Then a towering wave of flames leap into the air that crackles with the heat -- a man just set his computer on fire.
At Interop, Security Talk Is Largely About Network Access Control
Commentary  |  5/23/2007  | 
Here at Interop, there's a lot of focus on security and a lot of that security attention is aimed right at network access control. It's a hot-button topic here. The question plaguing many IT and security managers, though, might be where to get started.
(Missing) Without A Trace: The IBM Tapes
Commentary  |  5/18/2007  | 
Did you read about the missing IBM Tapes? It's almost like another undecipherable episode from "Lost," except it's a car that may have crashed in this case, apparently, and it's tapes that got lost in the aftermath.
The Top 10 Most Influential Security Visionaries Of All Time
Commentary  |  5/17/2007  | 
AT&T chief security officer Ed Amoroso, speaking before a packed auditorium Thursday at his company's cybersecurity conference, wanted to test the collective knowledge of those in the room. How well-studied were they in the visionaries who've had the greatest impact on IT security? Not very well, it turns out, as few could put
Lost Your Data? What's It Worth To You?
Commentary  |  5/16/2007  | 
Should virtue be its own reward when it comes to returning lost data these days? Sharon Gaudin's story about IBM's plea to find lost tapes with sensitive employee data really got me into one of those Stephen Colbert finger-wagging moments.
If An FBI Analyst Can Steal National Secrets, What Are Your Workers Lifting?
Commentary  |  5/15/2007  | 
Looking back on the story about the former Marine and FBI analyst who stole classified information from both the White House and the FBI's own database, I think there are some important lessons to be learned from this one.
A Day In The Life Of Cigna's CISO: 7 Things You Didn't Know
Commentary  |  5/11/2007  | 
I recently visited Cigna chief information security officer Craig Shumard at his company's offices in suburban Connecticut. On a clear, sunny day that slowly melted away the last vestiges of winter -- mostly scattered mounds of snow encrusted with rock and dirt -- across the rolling hills of the employee benefits provider's campus, I got to see firsthand how the security chief at a big-time company operates and interacts with his staff. It was impressive, to say the least.
Why Do Workers Steal Data?
Commentary  |  5/10/2007  | 
I was fascinated by Sharon Gaudin's recent article reporting that 45% of professionals steal data when they leave their jobs. I couldn't help wondering why they do it. A desire to suck up to their new supervisors? A sense of grievance against the company that they're leaving? Or just because they can?
Besieged E-Gold Founder Claims (Not Unconvincingly) To Be Victim Of A Fed Vendetta
Commentary  |  5/2/2007  | 
Bloggers live for feedback to their controversial postings and in this regard, my entry earlier this week about a federal grand jury's decision late last week to indict E Gold Ltd, Gold & Silver Reserve Inc., and the owners of these digital currency businesses on charges of money laundering, conspiracy, and operating an unlicensed money transmitting business did not disappoint. The following day, I recei


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
Managing system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-1172
PUBLISHED: 2023-03-17
The Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the full name value in versions up to, and including, 21.5 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that w...
CVE-2023-1469
PUBLISHED: 2023-03-17
The WP Express Checkout plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘pec_coupon[code]’ parameter in versions up to, and including, 2.2.8 due to insufficient input sanitization and output escaping. This makes it possible for authenti...
CVE-2023-1466
PUBLISHED: 2023-03-17
A vulnerability was found in SourceCodester Student Study Center Desk Management System 1.0. It has been rated as critical. This issue affects the function view_student of the file admin/?page=students/view_student. The manipulation of the argument id with the input 3' AND (SELECT 2100 FROM (SELECT(...
CVE-2023-1467
PUBLISHED: 2023-03-17
A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown function of the file Master.php?f=delete_img of the component POST Parameter Handler. The manipulation of the argument path with the input C%3A%2Ffoo.txt le...
CVE-2023-1468
PUBLISHED: 2023-03-17
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file admin/?page=reports&date_from=2023-02-17&date_to=2023-03-17 of the component Report Handler. The manipula...