Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Products and Releases

Content posted in May 2021
Axio Helping Organizations Protect Themselves Against Ransomware
Products and Releases  |  5/27/2021  | 
New features include actionable and targeted recommendations to secure organizations from ransomware events.
Imperva Introduces Data Privacy Solution to Help Manage Sensitive Data
Products and Releases  |  5/26/2021  | 
Imperva Sonar Platform enhanced with Data Privacy solution monitors, protects and reports on personal data across all data assets
Salt Security Raises $70 million in Series C Funding to Expand Global Operations
Products and Releases  |  5/26/2021  | 
Total funding of $131 million along with 400% growth in revenue further enhance the lead Salt holds in the API security market.
Imprivata Unveils Mobile Facial Recognition Solution
Products and Releases  |  5/25/2021  | 
Advanced facial biometrics simplify EPCS enrollment while ensuring DEA compliance.
One Identity Doubles Down on Its Cloud-First Strategy
Products and Releases  |  5/25/2021  | 
Sumo Logic Completes Acquisition of DFLabs to Further Expand Cloud SIEM and Automation
Products and Releases  |  5/25/2021  | 
Sumo Logic's cloud SIEM combined with SOAR technology to help further reduce manual tasks and accelerate threat detection analysis, incident response, and forensic investigations.
GroupSense Unveils Ransomware Response Readiness Assessment
Products and Releases  |  5/21/2021  | 
Service offering includes expert assessment, response playbook, and tabletop exercise to help customers of all sizes properly prepare for ransomware attacks.
BlackBerry Builds Out Extended Detection and Response (XDR) Capabilities with New Cybersecurity Innovations
Products and Releases  |  5/18/2021  | 
Company launches next-gen BlackBerry Optics 3.0 and BlackBerry Gateway for ZTNA.
CYBER.ORG Seeks Public Commentary on National K-12 Cybersecurity Learning Standards
Products and Releases  |  5/18/2021  | 
Initiative aims to expand access to K-12 cybersecurity education and bolster the pipeline of diverse cyber talent seeks feedback from the public.
New Managed Security Awareness Solution From Arctic Wolf
Products and Releases  |  5/18/2021  | 
Powered by the cloud-native Arctic Wolf Platform, the new solution is the first security awareness and training program delivered as a concierge service.
Zero Trust, macOS and Threat Hunting Updates Added to CrowdStrike's Falcon Platform
Products and Releases  |  5/18/2021  | 
CrowdStrike updates macOS coverage, Falcon Complete and Overwatch dashboards and launches new capabilities with CrowdStrike Zero Trust.
Cyber Insurance Provider, Coalition, Launches Free Risk Management Platform to Help Organizations Combat Ransomware & Cyber Risk
Products and Releases  |  5/18/2021  | 
Coalition Control is a risk management platform that offers automated security scanning & continuous monitoring of vulnerabilities for organizations of all sizes.
CrowdStrike Falcon Fusion Streamlines Security Operation Center With Automated Workflows
Products and Releases  |  5/18/2021  | 
New cloud-scale framework provides customizable and easy-to-use custom automation to simplify enterprise security workflows.
Devo Technology Announces Devo Content Stream
Products and Releases  |  5/17/2021  | 
Absolute Software Acquires NetMotion
Products and Releases  |  5/17/2021  | 
Query.AI Closes $4.6M in Funding
Products and Releases  |  5/17/2021  | 
Zscaler Ransomware Report Reveals Sophisticated Double Extortion Attacks Are Targeting Essential Industries
Products and Releases  |  5/13/2021  | 
New research highlights the top vertical industries impacted and tactics used by the most active ransomware families resulting in $1.4B in ransom demands.
Sophos Launches XDR Solution that Synchronizes Native Endpoint, Server, Firewall, and Email Security
Products and Releases  |  5/12/2021  | 
Sophos XDR extends new EDR capabilities across next-generation cybersecurity solutions, creating the most comprehensive and integrated threat detection and response system.
Vulcan Cyber Research Reveals Most Enterprise Cyber Security Teams Lack the Ability to Remediate Risk
Products and Releases  |  5/12/2021  | 
Benchmark study finds most cyber security organizations lack the tooling and resources to remediate risk and deliver enterprise cyber hygiene.
Code42 Incydr Bolsters Insider Risk Indicators With Actionable Prioritization of Data Exfiltration Events
Products and Releases  |  5/12/2021  | 
Contextual alerting details high-risk data movement on endpoints, in cloud environments and email systems.
LiveAction Acquires CounterFlow AI to Expand Network Security Offerings
Products and Releases  |  5/4/2021  | 
The combined portfolio will deliver real-time advanced encrypted traffic analysis, expand network visibility and streamline workflows for Network and Security Operations teams.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Incorporating a Prevention Mindset into Threat Detection and Response
Threat detection and response systems, by definition, are reactive because they have to wait for damage to be done before finding the attack. With a prevention-mindset, security teams can proactively anticipate the attacker's next move, rather than reacting to specific threats or trying to detect the latest techniques in real-time. The report covers areas enterprises should focus on: What positive response looks like. Improving security hygiene. Combining preventive actions with red team efforts.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-29349
PUBLISHED: 2022-05-25
kkFileView v4.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the url parameter at /controller/OnlinePreviewController.java.
CVE-2022-29358
PUBLISHED: 2022-05-25
epub2txt2 v2.04 was discovered to contain an integer overflow via the function bug in _parse_special_tag at sxmlc.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted XML file.
CVE-2022-29359
PUBLISHED: 2022-05-25
A stored cross-site scripting (XSS) vulnerability in /scas/?page=clubs/application_form&id=7 of School Club Application System v0.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter.
CVE-2022-29361
PUBLISHED: 2022-05-25
Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included inside the body.
CVE-2022-29362
PUBLISHED: 2022-05-25
A cross-site scripting (XSS) vulnerability in /navigation/create?ParentID=%23 of ZKEACMS v3.5.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ParentID parameter.