Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Larry Loeb

Content posted in July 2019
Capital One Had to Be Told by Outsider That Data Breach Occurred
Larry Loeb  |  7/30/2019  | 
Capital One got hacked and didn't even know it.
Kubernetes Won't Get Secure Just Sitting There
Larry Loeb  |  7/30/2019  | 
Let's delve into containers.
Not Using DMARC Security Protocol Leaves Businesses Vulnerable to Spoofing
Larry Loeb  |  7/29/2019  | 
A global survey found that most business and government domains don't use DMARC, which opens them up to email spoofing.
IT Modernization: Needed & Not Easy
Larry Loeb  |  7/26/2019  | 
'Challenges with architecture modernization' ranks high on IT survey respondents' list of grievances.
Sanctioned Russian Spies Can Own Your Android Device
Larry Loeb  |  7/25/2019  | 
It's professional-grade naughtiness, people.
Comodo Leaves AV Vulnerabilities Unpatched
Larry Loeb  |  7/25/2019  | 
Even though Comodo was notified by Tenable in April of the problems, no patches by have been forthcoming from the antivirus firm.
Palo Alto Networks Does Not Fully Address Vulnerability in GlobalProtect SSL VPN Solution
Larry Loeb  |  7/24/2019  | 
If Palo Alto Networks wants to keep the trust of its customers in the future, it will have to do much better in how it relates to them.
Skylight Says Cylance Can Be Bypassed; Cylance Says, 'Not So Fast, There!'
Larry Loeb  |  7/23/2019  | 
Skylight's findings certainly gained attention, but at what cost to the company's credibility?
Bluetooth Devices Leaking Tracking Data
Larry Loeb  |  7/19/2019  | 
Researchers from Boston University found that the current version of Bluetooth Low Energy, as implemented by Apple iOS and Windows 10, leaked identifiers that allowed tracking of the device that was using BLE.
Malvertising Adds Sophistication to Disruption
Larry Loeb  |  7/17/2019  | 
French security researcher Malekal delved into a murky world.
New BitPaymer Ransomware Discovered Hunting Big Game
Larry Loeb  |  7/16/2019  | 
New variant shares most of its code with the BitPaymer ransomware operated by INDRIK SPIDER.
DNS Hijacking on the Rise as Warning Is Issued
Larry Loeb  |  7/15/2019  | 
The National Cyber Security Centre, a part of the UK's GCHQ, has issued an advisory that deals with Domain Name System (DNS) hijacking by threat actors.
Older Versions of Windows at Risk From New Zero-Day Exploit
Larry Loeb  |  7/12/2019  | 
Cybersecurity firm ESET discovered a Windows zero-day exploit that affects older systems like Windows 7 and Server 2008.
Demand for Certain B2B Security Software Accelerates
Larry Loeb  |  7/11/2019  | 
B2B security software is growing faster than overall B2B software sales, according to new figures.
Research Shows Top Banks Failing in Security, Privacy & Compliance
Larry Loeb  |  7/10/2019  | 
Apart from that, it's all going swimmingly.
An Attack Using Only System Tools Is Not Invisible – You Just Have to Look Harder
Larry Loeb  |  7/9/2019  | 
Microsoft's team behind Windows Defender ATP has identified a new 'fileless' malware campaign that can bypass standard antivirus tools.
TA505 Invades the Middle East
Larry Loeb  |  7/8/2019  | 
The campaign, detected by Trend Micro, has been identified as coming from threat actor TA505.
Cryptominer Delivers New Kind of Malware
Larry Loeb  |  7/5/2019  | 
Malicious actors seem to be beginning to turn to Golang as a malware language since it is not typically picked up by antivirus software.
Survey Finds Enterprise Concerned About Mass Data Fragmentation
Larry Loeb  |  7/5/2019  | 
For many organizations, the public cloud has failed to live up to expectations.
Phishing Campaign Evades Analysis by Hiding URL in QR Code
Larry Loeb  |  7/2/2019  | 
Phishing attacks are never really dead.
Identity Can't Recognize Itself
Larry Loeb  |  7/2/2019  | 
Identity management needs to be 'frictionless' if it is going to gain users.


Manchester United Suffers Cyberattack
Dark Reading Staff 11/23/2020
As 'Anywhere Work' Evolves, Security Will Be Key Challenge
Robert Lemos, Contributing Writer,  11/23/2020
Cloud Security Startup Lightspin Emerges From Stealth
Kelly Sheridan, Staff Editor, Dark Reading,  11/24/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win an Amazon Gift Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
2021 Top Enterprise IT Trends
We've identified the key trends that are poised to impact the IT landscape in 2021. Find out why they're important and how they will affect you today!
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-27660
PUBLISHED: 2020-11-30
SQL injection vulnerability in request.cgi in Synology SafeAccess before 1.2.3-0234 allows remote attackers to execute arbitrary SQL commands via the domain parameter.
CVE-2020-27659
PUBLISHED: 2020-11-30
Multiple cross-site scripting (XSS) vulnerabilities in Synology SafeAccess before 1.2.3-0234 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) profile parameter.
CVE-2020-29127
PUBLISHED: 2020-11-30
An issue was discovered on Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25. After logging into the portal as a root user (using any web browser), the portal can be accessed with root privileges when the URI cgi-bin/csp?cspid=&csppage=cgi_PgOverview&csplang=en is visit...
CVE-2020-25624
PUBLISHED: 2020-11-30
hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer over-read via values obtained from the host controller driver.
CVE-2020-29378
PUBLISHED: 2020-11-29
An issue was discovered on V-SOL V1600D V2.03.69 and V2.03.57, V1600D4L V1.01.49, V1600D-MINI V1.01.48, V1600G1 V2.0.7 and V1.9.7, and V1600G2 V1.1.4 OLT devices. It is possible to elevate the privilege of a CLI user (to full administrative access) by using the password [email protected]#y$z%x6x7q8c9z) for the e...