Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Dark Reading Article Boards

Message Boards posted in November 2020
ISO 27701 Paves the Way for a Strategic Approach to Privacy
Last Message: 11/30/2020
 |  Comments: 1
Why Vulnerable Code Is Shipped Knowingly
Last Message: 11/30/2020
 |  Comments: 1
Researchers Say They've Developed Fastest Open Source IDS/IPS
Last Message: 11/30/2020
 |  Comments: 2
A 7-Step Cybersecurity Plan for Healthcare Organizations
Last Message: 11/30/2020
 |  Comments: 1
Look Beyond the 'Big 5' in Cyberattacks
Last Message: 11/27/2020
 |  Comments: 1
8 New and Hot Cybersecurity Certifications for 2020
Last Message: 11/25/2020
 |  Comments: 3
The $500,000 Cost of Not Detecting Good vs. Bad Bot Behavior
Last Message: 11/24/2020
 |  Comments: 1
10 Tips for More Secure Mobile Devices
Last Message: 11/23/2020
 |  Comments: 4
A Call for Change in Physical Security
Last Message: 11/21/2020
 |  Comments: 1
6 Cybersecurity Lessons From 2020
Last Message: 11/20/2020
 |  Comments: 1
How to Identify Cobalt Strike on Your Network
Last Message: 11/19/2020
 |  Comments: 2
Cryptocurrency Scams Replacing Ransomware as Attackers' Fave
Last Message: 11/18/2020
 |  Comments: 2
Physical Security Has a Lot of Catching Up to Do
Last Message: 11/17/2020
 |  Comments: 1
Breakdown of a Break-in: A Manufacturer's Ransomware Response
Last Message: 11/17/2020
 |  Comments: 1
5 Steps Every Company Should Take to Avoid Data Theft Risk
Last Message: 11/17/2020
 |  Comments: 1
6 Ways Passwords Fail Basic Security Tests
Last Message: 11/16/2020
 |  Comments: 2
Researchers Find 24 'Dangerous' Android Apps with 382M Installs
Last Message: 11/15/2020
 |  Comments: 1
How Hackers Blend Attack Methods to Bypass MFA
Last Message: 11/15/2020
 |  Comments: 1
Cartoon Contest: Second Wind
Last Message: 11/15/2020
 |  Comments: 12
Ransomware Trains Its Sights on Cloud Providers
Last Message: 11/13/2020
 |  Comments: 16
Insecure APIs a Growing Risk for Organizations
Last Message: 11/10/2020
 |  Comments: 1
The Oracle-Walmart-TikTok Deal Is Not Enough
Last Message: 11/9/2020
 |  Comments: 1
NSS Labs' Abrupt Shutdown Leaves Many Unanswered Questions
Last Message: 11/7/2020
 |  Comments: 1
Rising Ransomware Breaches Underscore Cybersecurity Failures
Last Message: 11/7/2020
 |  Comments: 2
APT Groups Get Innovative -- and More Dangerous -- in Q3
Last Message: 11/5/2020
 |  Comments: 1
How Healthcare Organizations Can Combat Ransomware
Last Message: 11/5/2020
 |  Comments: 1
Cartoon: Reverse Ransomware
Last Message: 11/4/2020
 |  Comments: 4
JavaScript Obfuscation Moves to Phishing Emails
Last Message: 11/2/2020
 |  Comments: 1
Cryptocurrency Theft Drives 3x Increase in Money Laundering
Last Message: 11/2/2020
 |  Comments: 2
Latest Security News from RSAC 2020
Last Message: 11/2/2020
 |  Comments: 4
Name That Toon: Castle in the Sky
Last Message: 11/1/2020
 |  Comments: 18


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-41392
PUBLISHED: 2021-09-17
static/main-preload.js in Boost Note through 0.22.0 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRenderer IPC interface, which invokes the dangerous openExternal Electron API.
CVE-2020-21547
PUBLISHED: 2021-09-17
Libsixel 1.8.2 contains a heap-based buffer overflow in the dither_func_fs function in tosixel.c.
CVE-2020-21548
PUBLISHED: 2021-09-17
Libsixel 1.8.3 contains a heap-based buffer overflow in the sixel_encode_highcolor function in tosixel.c.
CVE-2021-39218
PUBLISHED: 2021-09-17
Wasmtime is an open source runtime for WebAssembly & WASI. In Wasmtime from version 0.26.0 and before version 0.30.0 is affected by a memory unsoundness vulnerability. There was an invalid free and out-of-bounds read and write bug when running Wasm that uses `externref`s in Wasmtime. To trigger ...
CVE-2021-41387
PUBLISHED: 2021-09-17
seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root.