Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Products and Releases

Content posted in April 2019
ESET Partners with Alphabet's Chronicle
Products and Releases  |  4/26/2019  | 
Device as Online Passport; TransUnions iovation Launches Updated Products
Products and Releases  |  4/9/2019  | 
Provides new ways to stop fraud without inconveniencing good customers
Global Insurer Addresses Cybersecurity Threats with Breach Protection Platform
Products and Releases  |  4/9/2019  | 
Continuous innovation to stay at eye level with attackers using holistic security platform.
Cynet Announces Free Cybersecurity Threat Assessment for Midsize and Large Organizations
Products and Releases  |  4/5/2019  | 
Cynet Threat Assessment program spotlights critical, exposed attack surfaces.
iovation Releases New Product Features
Products and Releases  |  4/5/2019  | 
Series of updates to online fraud prevention and authentication products increase security for businesses and reduce friction for consumers.
Aqua Security Closes $62M in Funding
Products and Releases  |  4/3/2019  | 
Led by Insight Partners, the investment round will enable Aqua to expand its platform.
Global Incident Response Threat Report (GIRTR) from Carbon Black Details Notable Rise in Island Hopping and Counter Incident Response (IR) Behaviors
Products and Releases  |  4/2/2019  | 
Survey finds attackers fighting back against security teams while also targeting supply chains With one of the most robust IR communities in cybersecurity, Carbon Black partners conduct more than one response engagement per day, on average, using Carbon Black software
Cybercriminals Using Popular TV Shows to Spread Malware
Products and Releases  |  4/1/2019  | 
Illegally streamed episodes of Game of Thrones, The Walking Dead, and Arrow used by cybercriminals to deploy malicious files.
Security Approach Prevents Data Theft By Imposing Limits on Data Travel, Preventing Unauthorized Access to High Value Servers
Products and Releases  |  4/1/2019  | 
HopSphere Radius Security Applies Standard Routing Principles to Put Data on a Leash, restricting critical data from going to dangerous or untrusted destinations


News
Former CISA Director Chris Krebs Discusses Risk Management & Threat Intel
Kelly Sheridan, Staff Editor, Dark Reading,  2/23/2021
Edge-DRsplash-10-edge-articles
Security + Fraud Protection: Your One-Two Punch Against Cyberattacks
Joshua Goldfarb, Director of Product Management at F5,  2/23/2021
News
Cybercrime Groups More Prolific, Focus on Healthcare in 2020
Robert Lemos, Contributing Writer,  2/22/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: Your new device is too complex. Me stick with iWheel.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
How Enterprises are Developing Secure Applications
How Enterprises are Developing Secure Applications
Recent breaches of third-party apps are driving many organizations to think harder about the security of their off-the-shelf software as they continue to move left in secure software development practices.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-21312
PUBLISHED: 2021-03-03
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability within the document upload function (Home > Management > Documents > Add, or /front/documen...
CVE-2021-21313
PUBLISHED: 2021-03-03
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is a vulnerability in the /ajax/common.tabs.php endpoint, indeed, at least two parameters _target and id are not proper...
CVE-2021-21314
PUBLISHED: 2021-03-03
GLPI is open source software which stands for Gestionnaire Libre de Parc Informatique and it is a Free Asset and IT Management Software package. In GLPI before verison 9.5.4, there is an XSS vulnerability involving a logged in user while updating a ticket.
CVE-2021-27931
PUBLISHED: 2021-03-03
LumisXP (aka Lumis Experience Platform) before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service.
CVE-2021-27935
PUBLISHED: 2021-03-03
An issue was discovered in AdGuard before 0.105.2. An attacker able to get the user's cookie is able to bruteforce their password offline, because the hash of the password is stored in the cookie.