Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Products and Releases

Content posted in May 2021
Axio Helping Organizations Protect Themselves Against Ransomware
Products and Releases  |  5/27/2021  | 
New features include actionable and targeted recommendations to secure organizations from ransomware events.
Imperva Introduces Data Privacy Solution to Help Manage Sensitive Data
Products and Releases  |  5/26/2021  | 
Imperva Sonar Platform enhanced with Data Privacy solution monitors, protects and reports on personal data across all data assets
Salt Security Raises $70 million in Series C Funding to Expand Global Operations
Products and Releases  |  5/26/2021  | 
Total funding of $131 million along with 400% growth in revenue further enhance the lead Salt holds in the API security market.
Imprivata Unveils Mobile Facial Recognition Solution
Products and Releases  |  5/25/2021  | 
Advanced facial biometrics simplify EPCS enrollment while ensuring DEA compliance.
One Identity Doubles Down on Its Cloud-First Strategy
Products and Releases  |  5/25/2021  | 
Sumo Logic Completes Acquisition of DFLabs to Further Expand Cloud SIEM and Automation
Products and Releases  |  5/25/2021  | 
Sumo Logic's cloud SIEM combined with SOAR technology to help further reduce manual tasks and accelerate threat detection analysis, incident response, and forensic investigations.
GroupSense Unveils Ransomware Response Readiness Assessment
Products and Releases  |  5/21/2021  | 
Service offering includes expert assessment, response playbook, and tabletop exercise to help customers of all sizes properly prepare for ransomware attacks.
BlackBerry Builds Out Extended Detection and Response (XDR) Capabilities with New Cybersecurity Innovations
Products and Releases  |  5/18/2021  | 
Company launches next-gen BlackBerry® Optics 3.0 and BlackBerry® Gateway for ZTNA.
CYBER.ORG Seeks Public Commentary on National K-12 Cybersecurity Learning Standards
Products and Releases  |  5/18/2021  | 
Initiative aims to expand access to K-12 cybersecurity education and bolster the pipeline of diverse cyber talent seeks feedback from the public.
New Managed Security Awareness Solution From Arctic Wolf
Products and Releases  |  5/18/2021  | 
Powered by the cloud-native Arctic Wolf Platform, the new solution is the first security awareness and training program delivered as a concierge service.
Zero Trust, macOS and Threat Hunting Updates Added to CrowdStrike's Falcon Platform
Products and Releases  |  5/18/2021  | 
CrowdStrike updates macOS coverage, Falcon Complete and Overwatch dashboards and launches new capabilities with CrowdStrike Zero Trust.
Cyber Insurance Provider, Coalition, Launches Free Risk Management Platform to Help Organizations Combat Ransomware & Cyber Risk
Products and Releases  |  5/18/2021  | 
Coalition Control is a risk management platform that offers automated security scanning & continuous monitoring of vulnerabilities for organizations of all sizes.
CrowdStrike Falcon Fusion Streamlines Security Operation Center With Automated Workflows
Products and Releases  |  5/18/2021  | 
New cloud-scale framework provides customizable and easy-to-use custom automation to simplify enterprise security workflows.
Devo Technology Announces Devo Content Stream
Products and Releases  |  5/17/2021  | 
Absolute Software Acquires NetMotion
Products and Releases  |  5/17/2021  | 
Query.AI Closes $4.6M in Funding
Products and Releases  |  5/17/2021  | 
Zscaler Ransomware Report Reveals Sophisticated Double Extortion Attacks Are Targeting Essential Industries
Products and Releases  |  5/13/2021  | 
New research highlights the top vertical industries impacted and tactics used by the most active ransomware families resulting in $1.4B in ransom demands.
Sophos Launches XDR Solution that Synchronizes Native Endpoint, Server, Firewall, and Email Security
Products and Releases  |  5/12/2021  | 
Sophos XDR extends new EDR capabilities across next-generation cybersecurity solutions, creating the most comprehensive and integrated threat detection and response system.
Vulcan Cyber Research Reveals Most Enterprise Cyber Security Teams Lack the Ability to Remediate Risk
Products and Releases  |  5/12/2021  | 
Benchmark study finds most cyber security organizations lack the tooling and resources to remediate risk and deliver enterprise cyber hygiene.
Code42 Incydr Bolsters Insider Risk Indicators With Actionable Prioritization of Data Exfiltration Events
Products and Releases  |  5/12/2021  | 
Contextual alerting details high-risk data movement on endpoints, in cloud environments and email systems.
LiveAction Acquires CounterFlow AI to Expand Network Security Offerings
Products and Releases  |  5/4/2021  | 
The combined portfolio will deliver real-time advanced encrypted traffic analysis, expand network visibility and streamline workflows for Network and Security Operations teams.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The 10 Most Impactful Types of Vulnerabilities for Enterprises Today
Managing system vulnerabilities is one of the old est - and most frustrating - security challenges that enterprise defenders face. Every software application and hardware device ships with intrinsic flaws - flaws that, if critical enough, attackers can exploit from anywhere in the world. It's crucial that defenders take stock of what areas of the tech stack have the most emerging, and critical, vulnerabilities they must manage. It's not just zero day vulnerabilities. Consider that CISA's Known Exploited Vulnerabilities (KEV) catalog lists vulnerabilitlies in widely used applications that are "actively exploited," and most of them are flaws that were discovered several years ago and have been fixed. There are also emerging vulnerabilities in 5G networks, cloud infrastructure, Edge applications, and firmwares to consider.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2023-1142
PUBLISHED: 2023-03-27
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve system files, credentials, and bypass authentication resulting in privilege escalation.
CVE-2023-1143
PUBLISHED: 2023-03-27
In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use Lua scripts, which could allow an attacker to remotely execute arbitrary code.
CVE-2023-1144
PUBLISHED: 2023-03-27
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 contains an improper access control vulnerability in which an attacker can use the Device-Gateway service and bypass authorization, which could result in privilege escalation.
CVE-2023-1145
PUBLISHED: 2023-03-27
Delta Electronics InfraSuite Device Master versions prior to 1.0.5 are affected by a deserialization vulnerability targeting the Device-DataCollect service, which could allow deserialization of requests prior to authentication, resulting in remote code execution.
CVE-2023-1655
PUBLISHED: 2023-03-27
Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.4.0.