Hot Topics

Editors' Choice

3

Security Pros Agree Military Should Conduct Offensive Hacking

Dark Reading Staff 2/11/2019

2

Valentine's Emails Laced with Gandcrab Ransomware

Kelly Sheridan, Staff Editor, Dark Reading,  2/14/2019

1

High Stress Levels Impacting CISOs Physically, Mentally

Jai Vijayan, Freelance writer,  2/14/2019

What the Government Shutdown Teaches Us about Cybersecurity

John Callahan, Chief Technology Officer, Veridium,  2/11/2019

New Zombie 'POODLE' Attack Bred from TLS Flaw

Kelly Jackson Higgins, Executive Editor at Dark Reading,  2/8/2019

Ransomware Attack Via MSP Locks Customers Out of Systems

Jai Vijayan, Freelance writer,  2/7/2019

Subscribe to Newsletters

Live Events

Webinars

More UBM Tech
Live Events

Drive Your Business and Career Forward at Interop19

Interop 2019 - The Unbiased IT Conference

Enterprise Connect 2019 - Build Your Comms & Collaboration Future

How to Use AI & Machine Learning to Improve Security

Tools & Techniques to Disrupt Lateral Movement

Understanding and Preventing Social Engineering Attacks

Webinar Archives

White Papers

[SANS] The Need for Speed: Integrated Threat Response

Vulnerability Management Checklist

Racing to Zero Trust: 4 Key Principles

[Gartner Report] Align Net Ops & Sec Ops

Investigate East-West Attacks on Critical Assets with Network Traffic Analysis

More White Papers

Video

How Secure Are Our Voting Systems?

10 Comments

Don't Overestimate WebAssembly's Security

0 Comments

SirenJack: Cracking SF's Emergency System

2 Comments

DeepLocker Hides Targeted Attacks

1 Comments

Forensic Analysis of 'Worst Voting ...

0 Comments

The Uncertain Fate of WHOIS, & Other ...

3 Comments

Stopping Payment Card Fraud With Threat Intel

0 Comments

Malicious Cryptomining & Other Shifting ...

0 Comments

The Economics of AI-Enabled Security

0 Comments

Threat Deception for Insider Threat

0 Comments

Filtering the Threat Intel Tsunami

0 Comments

Ensuring Hardened, Secure Web Apps

0 Comments

All Videos

Cartoon

Latest Comment: I know I'm just the intern, but I don't think you put much forethought into security...

Cartoon Archive

Current Issue

5 Emerging Cyber Threats to Watch for in 2019

Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.

Download This Issue!

Back Issues | Must Reads

Flash Poll

All Polls

Reports

How Enterprises Are Attacking the Cybersecurity Problem

Data breach fears and the need to comply with regulations such as GDPR are two major drivers increased spending on security products and technologies. But other factors are contributing to the trend as well. Find out more about how enterprises are attacking the cybersecurity problem by reading our report today.

Download Now!

How Enterprises Are Using IT Threat Intelligence

0 comments

Online Malware and Threats: A Profile of Today's Security Posture

0 comments

The Risk Management Struggle

0 comments

More Reports

Twitter Feed

Tweets about "from:DarkReading OR @DarkReading"

Bug Report

Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database

CVE-2019-8396
PUBLISHED: 2019-02-17

A buffer overflow in H5O__layout_encode in H5Olayout.c in the HDF HDF5 through 1.10.4 library allows attackers to cause a denial of service via a crafted HDF5 file. This issue was triggered while repacking an HDF5 file, aka "Invalid write of size 2."

CVE-2019-8397
PUBLISHED: 2019-02-17

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_close_real in H5T.c.

CVE-2019-8398
PUBLISHED: 2019-02-17

An issue was discovered in the HDF HDF5 1.10.4 library. There is an out of bounds read in the function H5T_get_size in H5T.c.

CVE-2019-8400
PUBLISHED: 2019-02-17

ORY Hydra before v1.0.0-rc.3+oryOS.9 has Reflected XSS via the oauth2/fallbacks/error error_hint parameter.

CVE-2019-7399
PUBLISHED: 2019-02-17

Amazon Fire OS before 5.3.6.4 allows a man-in-the-middle attack against HTTP requests for "Terms of Use" and Privacy pages.