Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Products and Releases

Content posted in May 2021
Axio Helping Organizations Protect Themselves Against Ransomware
Products and Releases  |  5/27/2021  | 
New features include actionable and targeted recommendations to secure organizations from ransomware events.
Imperva Introduces Data Privacy Solution to Help Manage Sensitive Data
Products and Releases  |  5/26/2021  | 
Imperva Sonar Platform enhanced with Data Privacy solution monitors, protects and reports on personal data across all data assets
Salt Security Raises $70 million in Series C Funding to Expand Global Operations
Products and Releases  |  5/26/2021  | 
Total funding of $131 million along with 400% growth in revenue further enhance the lead Salt holds in the API security market.
Imprivata Unveils Mobile Facial Recognition Solution
Products and Releases  |  5/25/2021  | 
Advanced facial biometrics simplify EPCS enrollment while ensuring DEA compliance.
One Identity Doubles Down on Its Cloud-First Strategy
Products and Releases  |  5/25/2021  | 
Sumo Logic Completes Acquisition of DFLabs to Further Expand Cloud SIEM and Automation
Products and Releases  |  5/25/2021  | 
Sumo Logic's cloud SIEM combined with SOAR technology to help further reduce manual tasks and accelerate threat detection analysis, incident response, and forensic investigations.
GroupSense Unveils Ransomware Response Readiness Assessment
Products and Releases  |  5/21/2021  | 
Service offering includes expert assessment, response playbook, and tabletop exercise to help customers of all sizes properly prepare for ransomware attacks.
BlackBerry Builds Out Extended Detection and Response (XDR) Capabilities with New Cybersecurity Innovations
Products and Releases  |  5/18/2021  | 
Company launches next-gen BlackBerry Optics 3.0 and BlackBerry Gateway for ZTNA.
CYBER.ORG Seeks Public Commentary on National K-12 Cybersecurity Learning Standards
Products and Releases  |  5/18/2021  | 
Initiative aims to expand access to K-12 cybersecurity education and bolster the pipeline of diverse cyber talent seeks feedback from the public.
New Managed Security Awareness Solution From Arctic Wolf
Products and Releases  |  5/18/2021  | 
Powered by the cloud-native Arctic Wolf Platform, the new solution is the first security awareness and training program delivered as a concierge service.
Zero Trust, macOS and Threat Hunting Updates Added to CrowdStrike's Falcon Platform
Products and Releases  |  5/18/2021  | 
CrowdStrike updates macOS coverage, Falcon Complete and Overwatch dashboards and launches new capabilities with CrowdStrike Zero Trust.
Cyber Insurance Provider, Coalition, Launches Free Risk Management Platform to Help Organizations Combat Ransomware & Cyber Risk
Products and Releases  |  5/18/2021  | 
Coalition Control is a risk management platform that offers automated security scanning & continuous monitoring of vulnerabilities for organizations of all sizes.
CrowdStrike Falcon Fusion Streamlines Security Operation Center With Automated Workflows
Products and Releases  |  5/18/2021  | 
New cloud-scale framework provides customizable and easy-to-use custom automation to simplify enterprise security workflows.
Devo Technology Announces Devo Content Stream
Products and Releases  |  5/17/2021  | 
Absolute Software Acquires NetMotion
Products and Releases  |  5/17/2021  | 
Query.AI Closes $4.6M in Funding
Products and Releases  |  5/17/2021  | 
Zscaler Ransomware Report Reveals Sophisticated Double Extortion Attacks Are Targeting Essential Industries
Products and Releases  |  5/13/2021  | 
New research highlights the top vertical industries impacted and tactics used by the most active ransomware families resulting in $1.4B in ransom demands.
Sophos Launches XDR Solution that Synchronizes Native Endpoint, Server, Firewall, and Email Security
Products and Releases  |  5/12/2021  | 
Sophos XDR extends new EDR capabilities across next-generation cybersecurity solutions, creating the most comprehensive and integrated threat detection and response system.
Vulcan Cyber Research Reveals Most Enterprise Cyber Security Teams Lack the Ability to Remediate Risk
Products and Releases  |  5/12/2021  | 
Benchmark study finds most cyber security organizations lack the tooling and resources to remediate risk and deliver enterprise cyber hygiene.
Code42 Incydr Bolsters Insider Risk Indicators With Actionable Prioritization of Data Exfiltration Events
Products and Releases  |  5/12/2021  | 
Contextual alerting details high-risk data movement on endpoints, in cloud environments and email systems.
LiveAction Acquires CounterFlow AI to Expand Network Security Offerings
Products and Releases  |  5/4/2021  | 
The combined portfolio will deliver real-time advanced encrypted traffic analysis, expand network visibility and streamline workflows for Network and Security Operations teams.


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Improving Enterprise Cybersecurity With XDR
Enterprises are looking at eXtended Detection and Response technologies to improve their abilities to detect, and respond to, threats. While endpoint detection and response is not new to enterprise security, organizations have to improve network visibility, expand data collection and expand threat hunting capabilites if they want their XDR deployments to succeed. This issue of Tech Insights also includes: a market overview for XDR from Omdia, questions to ask before deploying XDR, and an XDR primer.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2017-20099
PUBLISHED: 2022-06-27
A vulnerability was found in Analytics Stats Counter Statistics Plugin 1.2.2.5 and classified as critical. This issue affects some unknown processing. The manipulation leads to code injection. The attack may be initiated remotely.
CVE-2022-2221
PUBLISHED: 2022-06-27
Information Exposure vulnerability in My Account Settings of Devolutions Remote Desktop Manager before 2022.1.8 allows authenticated users to access credentials of other users. This issue affects: Devolutions Remote Desktop Manager versions prior to 2022.1.8.
CVE-2022-28622
PUBLISHED: 2022-06-27
A potential security vulnerability has been identified in HPE StoreOnce Software. The SSH server supports weak key exchange algorithms which could lead to remote unauthorized access. HPE has made the following software update to resolve the vulnerability in HPE StoreOnce Software 4.3.2.
CVE-2022-31034
PUBLISHED: 2022-06-27
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an SSO login is initiated from the Argo CD CLI or UI. The vulnerabilities are due to the use of insufficiently random values in paramete...
CVE-2022-31035
PUBLISHED: 2022-06-27
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v1.0.0 are vulnerable to a cross-site scripting (XSS) bug allowing a malicious user to inject a `javascript:` link in the UI. When clicked by a victim user, the script will execute with th...