Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Products and Releases

Content posted in April 2019
ESET Partners with Alphabet's Chronicle
Products and Releases  |  4/26/2019  | 
Device as Online Passport; TransUnions iovation Launches Updated Products
Products and Releases  |  4/9/2019  | 
Provides new ways to stop fraud without inconveniencing good customers
Global Insurer Addresses Cybersecurity Threats with Breach Protection Platform
Products and Releases  |  4/9/2019  | 
Continuous innovation to stay at eye level with attackers using holistic security platform.
Cynet Announces Free Cybersecurity Threat Assessment for Midsize and Large Organizations
Products and Releases  |  4/5/2019  | 
Cynet Threat Assessment program spotlights critical, exposed attack surfaces.
iovation Releases New Product Features
Products and Releases  |  4/5/2019  | 
Series of updates to online fraud prevention and authentication products increase security for businesses and reduce friction for consumers.
Aqua Security Closes $62M in Funding
Products and Releases  |  4/3/2019  | 
Led by Insight Partners, the investment round will enable Aqua to expand its platform.
Global Incident Response Threat Report (GIRTR) from Carbon Black Details Notable Rise in Island Hopping and Counter Incident Response (IR) Behaviors
Products and Releases  |  4/2/2019  | 
Survey finds attackers fighting back against security teams while also targeting supply chains With one of the most robust IR communities in cybersecurity, Carbon Black partners conduct more than one response engagement per day, on average, using Carbon Black software
Cybercriminals Using Popular TV Shows to Spread Malware
Products and Releases  |  4/1/2019  | 
Illegally streamed episodes of Game of Thrones, The Walking Dead, and Arrow used by cybercriminals to deploy malicious files.
Security Approach Prevents Data Theft By Imposing Limits on Data Travel, Preventing Unauthorized Access to High Value Servers
Products and Releases  |  4/1/2019  | 
HopSphere Radius Security Applies Standard Routing Principles to Put Data on a Leash, restricting critical data from going to dangerous or untrusted destinations


HackerOne Drops Mobile Voting App Vendor Voatz
Dark Reading Staff 3/30/2020
Limited-Time Free Offers to Secure the Enterprise Amid COVID-19
Curtis Franklin Jr., Senior Editor at Dark Reading,  3/31/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
6 Emerging Cyber Threats That Enterprises Face in 2020
This Tech Digest gives an in-depth look at six emerging cyber threats that enterprises could face in 2020. Download your copy today!
Flash Poll
State of Cybersecurity Incident Response
State of Cybersecurity Incident Response
Data breaches and regulations have forced organizations to pay closer attention to the security incident response function. However, security leaders may be overestimating their ability to detect and respond to security incidents. Read this report to find out more.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-11547
PUBLISHED: 2020-04-05
PRTG Network Monitor before 20.1.57.1745 allows remote unauthenticated attackers to obtain information about probes running or the server itself (CPU usage, memory, Windows version, and internal statistics) via an HTTP request, as demonstrated by type=probes to login.htm or index.htm.
CVE-2020-11548
PUBLISHED: 2020-04-05
The Search Meter plugin through 2.13.2 for WordPress allows user input introduced in the search bar to be any formula. The attacker could achieve remote code execution via CSV injection if a wp-admin/index.php?page=search-meter Export is performed.
CVE-2020-11542
PUBLISHED: 2020-04-04
3xLOGIC Infinias eIDC32 2.213 devices with Web 1.107 allow Authentication Bypass via CMD.HTM?CMD= because authentication depends on the client side's interpretation of the <KEY>MYKEY</KEY> substring.
CVE-2020-11533
PUBLISHED: 2020-04-04
Ivanti Workspace Control before 10.4.30.0, when SCCM integration is enabled, allows local users to obtain sensitive information (keying material).
CVE-2020-11529
PUBLISHED: 2020-04-04
Common/Grav.php in Grav before 1.6.23 has an Open Redirect.