Products and Releases

Content posted in December 2017
New Study Finds Security Professionals are Wasting 40 Hours Per Month Due to Inefficient Systems
Products and Releases  |  12/27/2017  | 
Study also reveals security professionals overwhelmingly view insider threats as a dangerous and growing concern for their organizations.
LogRhythm Introduces Standalone User and Entity Behavior Analytics Offering
Products and Releases  |  12/27/2017  | 
LogRhythm UEBA provides increased security coverage, faster threat detection with minimal investment.
IGEL Integrates Endpoint Computing Solutions With deviceTRUST
Products and Releases  |  12/14/2017  | 
Through dynamic contextual awareness, corporate data remains secure and compliance and regulatory requirements are met when end-users roam between IGEL OS-powered endpoint devices.
CyberX Adds Secure Remote Access Integration for Critical Industrial Networks
Products and Releases  |  12/14/2017  | 
New privileged account security integration reduces risk of unauthorized access to control networks.
Leidos Partners with SecurityMatters for Passive Monitoring of Cyber Threats
Products and Releases  |  12/14/2017  | 
Monitoring will focus on industrial control systems networks.
IRS Warns Taxpayers, Tax Pros of New Email Scam Targeting Hotmail Users
Products and Releases  |  12/13/2017  | 
New phishing email scam targets Hotmail users using IRS as bait.
Pwnie Express Secures $8 Million in New Funding
Products and Releases  |  12/13/2017  | 
Company names Todd DeSisto as new CEO.
Upstream Security Secures $9 Million Series A Funding Round
Products and Releases  |  12/13/2017  | 
Focuses on ramping up its cloud-based cybersecurity for connected and autonomous car fleets.
Dev/Con Detect Launches Ad Tech Industry Fraud Detection, Prevention
Products and Releases  |  12/11/2017  | 
Startup lands $1.29mm in seed round funding.
VMware and Carbon Black Team Up in Data Center and Cloud Security
Products and Releases  |  12/7/2017  | 
New joint, cloud-based security solution combines enforcement of 'known good' application behavior with advanced threat detection and automated remediation
Phantom.me App Supports International Right to Privacy by Protecting Mobile Phone Activity
Products and Releases  |  12/6/2017  | 
In conjunction with Human Rights Day, company invites NGOs to apply for free use of the app
Coronet Announces SecureCloud - A New Approach to Cloud Security
Products and Releases  |  12/5/2017  | 
Democratizes Enterprise-Grade Security for SMEs and Drives TCO Down to One-Tenth the Cost of Traditional Cloud Security Infrastructure.
Ivanti Automates Device Isolation and Remediation to Further Operationalize a Defense-in-Depth Security Strategy
Products and Releases  |  12/4/2017  | 
Integrated Console and Workflows Enable Actions and Policies to be Applied to Any Mix of Device Types, Enhancing Security Response and Remediation
Entrust Datacard Acquires Trustis Limited
Products and Releases  |  12/4/2017  | 
Acquisition provides Entrust Datacard with expanded regional capability to address identity and personal data protection and regulations
Gemalto Gives Google Cloud Platform Customers Flexible Encryption and Key Management Capabilities
Products and Releases  |  12/4/2017  | 
Google customers can use Gemaltos SafeNet Data Encryption Solutions to bring their own encryption keys to secure their sensitive data on the cloud.
ScaleFT Announces General Availability of its Zero Trust Access Fabric
Products and Releases  |  12/4/2017  | 
ScaleFT is the first company to deliver Googles BeyondCorp as a service - helping companies achieve their own Zero Trust security architecture.


Facebook Aims to Make Security More Social
Kelly Sheridan, Associate Editor, Dark Reading,  2/20/2018
SEC: Companies Must Disclose More Info on Cybersecurity Attacks & Risks
Kelly Jackson Higgins, Executive Editor at Dark Reading,  2/22/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
How to Cope with the IT Security Skills Shortage
Most enterprises don't have all the in-house skills they need to meet the rising threat from online attackers. Here are some tips on ways to beat the shortage.
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-0290
Published: 2017-05-09
NScript in mpengine in Microsoft Malware Protection Engine with Engine Version before 1.1.13704.0, as used in Windows Defender and other products, allows remote attackers to execute arbitrary code or cause a denial of service (type confusion and application crash) via crafted JavaScript code within ...

CVE-2016-10369
Published: 2017-05-08
unixsocket.c in lxterminal through 0.3.0 insecurely uses /tmp for a socket file, allowing a local user to cause a denial of service (preventing terminal launch), or possibly have other impact (bypassing terminal access control).

CVE-2016-8202
Published: 2017-05-08
A privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric OS (FOS) releases earlier than v7.4.1d and v8.0.1b could allow an authenticated attacker to elevate the privileges of user accounts accessing the system via command line interface. With affected version...

CVE-2016-8209
Published: 2017-05-08
Improper checks for unusual or exceptional conditions in Brocade NetIron 05.8.00 and later releases up to and including 06.1.00, when the Management Module is continuously scanned on port 22, may allow attackers to cause a denial of service (crash and reload) of the management module.

CVE-2017-0890
Published: 2017-05-08
Nextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS vulnerability in the search module. To be exploitable a user has to write or paste malicious content into the search dialogue.