Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Slideshows

Content posted in May 2016
Adobe Flash: 6 Tips For Blocking Exploit Kits
Slideshows  |  5/31/2016  | 
While Adobe does a good job patching exploits, there are additional steps security staffs can take to hedge their bets.
FBI Report: Deconstructing The Wide Scope Of Internet Crime
Slideshows  |  5/27/2016  | 
Hottest crimes reported to IC3 last year include ransomware and email scams via business email compromise and all account compromise attacks.
How To Manage And Control End User Access
Slideshows  |  5/24/2016  | 
A look at the perils of manual user-access provisioning and ways to streamline and better manage the process via automation.
5 Tips for Protecting Firmware From Attacks
Slideshows  |  5/20/2016  | 
Dont let hackers take advantage of holes in firmware. Heres how to stop them.
IoT Security By The Numbers
Slideshows  |  5/19/2016  | 
Some recent stats on adoption rates and perceptions about risks surrounding the Internet of Things.
Encryption 101: Covering the Bases
Slideshows  |  5/13/2016  | 
Heres an overview of the key encryption types youll need to lock down your companys systems.
Happy Blame Someone Else Day
Slideshows  |  5/13/2016  | 
In cybersecurity, each day a company experiences a data breach, it appears to be #BlameSomeoneElseDay
6 Shocking Intellectual Property Breaches
Slideshows  |  5/12/2016  | 
Not all breaches involve lost customer data. Sometimes the most damaging losses come when intellectual property is pilfered.
What Makes Next-Gen Endpoint Protection Unique?
Slideshows  |  5/10/2016  | 
Here are five critical factors you need to know about today's new breed of endpoint protection technology.
The 10 Worst Vulnerabilities of The Last 10 Years
Slideshows  |  5/6/2016  | 
From the thousands of vulns that software vendors disclosed over the past 10 years, a few stand out for being a lot scarier than the rest.
10 Biggest Mega Breaches Of The Past 10 Years
Slideshows  |  5/3/2016  | 
These data breaches from Dark Reading's 10-year history boggle the mind in terms of scale and fallout.
8 Microsoft Office 365 Security Tips To Reduce Data Loss
Slideshows  |  5/2/2016  | 
Even with a slew of new security tools and compliance guidance, there are still things you can do to protect this critical business system.


Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-19589
PUBLISHED: 2019-12-05
The Lever PDF Embedder plugin 4.4 for WordPress does not block the distribution of polyglot PDF documents that are valid JAR archives.
CVE-2019-19597
PUBLISHED: 2019-12-05
D-Link DAP-1860 devices before v1.04b03 Beta allow arbitrary remote code execution as root without authentication via shell metacharacters within an HNAP_AUTH HTTP header.
CVE-2019-19598
PUBLISHED: 2019-12-05
D-Link DAP-1860 devices before v1.04b03 Beta allow access to administrator functions without authentication via the HNAP_AUTH header timestamp value. In HTTP requests, part of the HNAP_AUTH header is the timestamp used to determine the time when the user sent the request. If this value is equal to t...
CVE-2019-19596
PUBLISHED: 2019-12-05
GitBook through 2.6.9 allows XSS via a local .md file.
CVE-2019-19590
PUBLISHED: 2019-12-05
In radare2 through 4.0, there is an integer overflow for the variable new_token_size in the function r_asm_massemble at libr/asm/asm.c. This integer overflow will result in a Use-After-Free for the buffer tokens, which can be filled with arbitrary malicious data after the free. This allows remote at...