Dark Reading Article Boards

Message Boards posted in November 2017
Page 1 / 2   >   >>
Time to Pull an Uber and Disclose Your Data Breach Now
Last Message: 11/30/2017
 |  Comments: 1
Samsung's Mobile Device Bug Bounty Program Gets a Boost
Last Message: 11/30/2017
 |  Comments: 2
First US Federal CISO Shares Security Lessons Learned
Last Message: 11/30/2017
 |  Comments: 3
Trend Micro Buys Immunio
Last Message: 11/30/2017
 |  Comments: 12
The Looming War of Good AI vs. Bad AI
Last Message: 11/30/2017
 |  Comments: 1
Counter Attack: Control the Credentials, Control the Compromise
Last Message: 11/30/2017
 |  Comments: 1
8 Low or No-Cost Sources of Threat Intelligence
Last Message: 11/30/2017
 |  Comments: 2
Big Apple Flaw Allows Root Access to Macs without Password
Last Message: 11/30/2017
 |  Comments: 1
Suspect in Yahoo Breach Case Pleads Guilty
Last Message: 11/30/2017
 |  Comments: 1
Why Security Depends on Usability -- and How to Achieve Both
Last Message: 11/29/2017
 |  Comments: 1
Threat Intelligence Sharing: The New Normal?
Last Message: 11/29/2017
 |  Comments: 14
A Call for Greater Regulation of Digital Currencies
Last Message: 11/28/2017
 |  Comments: 9
Businesses Can't Tell Good Bots from Bad Bots: Report
Last Message: 11/28/2017
 |  Comments: 13
Iranian Nation-State Hacker Indicted for HBO Hack, Extortion
Last Message: 11/28/2017
 |  Comments: 10
Cyber Forensics: The Next Frontier in Cybersecurity
Last Message: 11/28/2017
 |  Comments: 1
Uber Paid Hackers $100K to Conceal 2016 Data Breach
Last Message: 11/27/2017
 |  Comments: 1
Security's #1 Problem: Economic Incentives
Last Message: 11/22/2017
 |  Comments: 18
Cartoon: Security Talent Crisis
Last Message: 11/22/2017
 |  Comments: 8
6 Real Black Friday Phishing Lures
Last Message: 11/22/2017
 |  Comments: 1
New OWASP Top 10 List Includes Three New Web Vulns
Last Message: 11/21/2017
 |  Comments: 1
121 Pieces of Malware Flagged on NSA Employee's Home Computer
Last Message: 11/21/2017
 |  Comments: 6
Half of Americans Unsure of Online Shopping Safety
Last Message: 11/21/2017
 |  Comments: 1
80% Of Web Applications Contain At Least One Security Bug
Last Message: 11/21/2017
 |  Comments: 3
Researcher Finds Hole in Windows ASLR Security Defense
Last Message: 11/21/2017
 |  Comments: 1
Stealthy Android Malware Found in Google Play
Last Message: 11/21/2017
 |  Comments: 1
Android Security Apps for BYOD Users
Last Message: 11/21/2017
 |  Comments: 1
Forget APTs: Let's Talk about Advanced Persistent Infrastructure
Last Message: 11/20/2017
 |  Comments: 1
We're Still Not Ready for GDPR? What is Wrong With Us?
Last Message: 11/20/2017
 |  Comments: 1
Windows 10 Update: 10 Key New Security Features
Last Message: 11/18/2017
 |  Comments: 7
Microsoft Word Vuln Went Unnoticed for 17 Years: Report
Last Message: 11/17/2017
 |  Comments: 4
Political Climate Change
Last Message: 11/16/2017
 |  Comments: 1
Frequent Software Releases, Updates May Injure App Security
Last Message: 11/16/2017
 |  Comments: 1
Deception Technology: Prevention Reimagined
Last Message: 11/16/2017
 |  Comments: 1
Insider Threats: Red Flags and Best Practices
Last Message: 11/15/2017
 |  Comments: 1
New Locky Ransomware Takes Another Turn
Last Message: 11/13/2017
 |  Comments: 2
'Eavesdropper' Exposes Millions of Mobile Conversations
Last Message: 11/13/2017
 |  Comments: 1
Customers Punish Breached Companies
Last Message: 11/13/2017
 |  Comments: 1
Google Tightens Web Security for 45 TLDs with HSTS
Last Message: 11/13/2017
 |  Comments: 1
Yahoo's Ex-CEO Mayer Calls Out Russian Hackers
Last Message: 11/9/2017
 |  Comments: 2
Hackers Poison Google Search Results to Deliver Zeus Panda
Last Message: 11/9/2017
 |  Comments: 1
How Law Firms Can Make Information Security a Higher Priority
Last Message: 11/9/2017
 |  Comments: 1
Burnout, Culture Drive Security Talent Out the Door
Last Message: 11/8/2017
 |  Comments: 2
Average Employee Manages Nearly 200 Passwords
Last Message: 11/8/2017
 |  Comments: 3
US-CERT Warns That HTTPS Inspection Tools Weaken TLS
Last Message: 11/8/2017
 |  Comments: 51
External Attacker Leaked 'Paradise Papers,' Law Firm Reports
Last Message: 11/7/2017
 |  Comments: 1
When Ransomware Strikes: 7 Steps You Can Take Now to Prepare
Last Message: 11/7/2017
 |  Comments: 1
Page 1 / 2   >   >>


Election Websites, Back-End Systems Most at Risk of Cyberattack in Midterms
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/14/2018
Intel Reveals New Spectre-Like Vulnerability
Curtis Franklin Jr., Senior Editor at Dark Reading,  8/15/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-13435
PUBLISHED: 2018-08-16
** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.0 for iOS. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method to disable passcode authentication. NOTE: the vendor indicates that this is not an attack of interest w...
CVE-2018-13446
PUBLISHED: 2018-08-16
** DISPUTED ** An issue was discovered in the LINE jp.naver.line application 8.8.1 for Android. The Passcode feature allows authentication bypass via runtime manipulation that forces a certain method's return value to true. In other words, an attacker could authenticate with an arbitrary passcode. ...
CVE-2018-14567
PUBLISHED: 2018-08-16
libxml2 2.9.8, if --with-lzma is used, allows remote attackers to cause a denial of service (infinite loop) via a crafted XML file that triggers LZMA_MEMLIMIT_ERROR, as demonstrated by xmllint, a different vulnerability than CVE-2015-8035 and CVE-2018-9251.
CVE-2018-15122
PUBLISHED: 2018-08-16
An issue found in Progress Telerik JustAssembly through 2018.1.323.2 and JustDecompile through 2018.2.605.0 makes it possible to execute code by decompiling a compiled .NET object (such as DLL or EXE) with an embedded resource file by clicking on the resource.
CVE-2018-11509
PUBLISHED: 2018-08-16
ASUSTOR ADM 3.1.0.RFQ3 uses the same default root:admin username and password as it does for the NAS itself for applications that are installed from the online repository. This may allow an attacker to login and upload a webshell.