Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Dark Reading Article Boards

Message Boards posted in February 2019
<<   <   Page 2 / 2
Diversity Is Vital to Advance Security
Last Message: 2/15/2019
 |  Comments: 1
Google Hit With $57 Million GDPR Fine in France
Last Message: 2/14/2019
 |  Comments: 2
2018 Was Second-Most Active Year for Data Breaches
Last Message: 2/14/2019
 |  Comments: 1
Up to 100,000 Reported Affected in Landmark White Data Breach
Last Message: 2/14/2019
 |  Comments: 1
Exposed Consumer Data Skyrocketed 126% in 2018
Last Message: 2/14/2019
 |  Comments: 2
Taming the Wild, West World of Security Product Testing
Last Message: 2/14/2019
 |  Comments: 2
8 Cybersecurity Myths Debunked
Last Message: 2/13/2019
 |  Comments: 3
7 Tips for Communicating with the Board
Last Message: 2/13/2019
 |  Comments: 1
Think Twice Before Paying a Ransom
Last Message: 2/13/2019
 |  Comments: 2
Japan Authorizes IoT Hacking
Last Message: 2/13/2019
 |  Comments: 7
Creating a Security Culture & Solving the Human Problem
Last Message: 2/13/2019
 |  Comments: 3
6 Reasons to Be Wary of Encryption in Your Enterprise
Last Message: 2/12/2019
 |  Comments: 1
7 Privacy Mistakes That Keep Security Pros on Their Toes
Last Message: 2/12/2019
 |  Comments: 1
What the Government Shutdown Teaches Us about Cybersecurity
Last Message: 2/11/2019
 |  Comments: 1
New Botnet Shows Evolution of Tech and Criminal Culture
Last Message: 2/11/2019
 |  Comments: 1
Microsoft Fixes 11 Critical, 39 Important Vulns
Last Message: 2/8/2019
 |  Comments: 2
Name that Toon: A Dog's Life
Last Message: 2/7/2019
 |  Comments: 65
DDoS Mitigation Pioneer Launches Network Security Startup
Last Message: 2/7/2019
 |  Comments: 1
Attacks on Automotive Systems Feared Likely
Last Message: 2/7/2019
 |  Comments: 1
Empathy: The Next Killer App for Cybersecurity?
Last Message: 2/7/2019
 |  Comments: 4
New Chrome Extension Takes Aim at Password Security
Last Message: 2/7/2019
 |  Comments: 1
Nest Hack Leaves Homeowner Sleepless in Chicago
Last Message: 2/7/2019
 |  Comments: 6
Over 59K Data Breaches Reported in EU Under GDPR
Last Message: 2/6/2019
 |  Comments: 2
4 Practical Questions to Ask Before Investing in AI
Last Message: 2/6/2019
 |  Comments: 1
Cybercriminals Exploit Gmail Feature to Scale Up Attacks
Last Message: 2/6/2019
 |  Comments: 1
3 Keys to Reducing the Threat of Ransomware
Last Message: 2/6/2019
 |  Comments: 10
Android Malware Hits Victims in 196 Countries
Last Message: 2/6/2019
 |  Comments: 2
DDoS Flaw Found in Brother Printers
Last Message: 2/4/2019
 |  Comments: 1
FaceTime Bug an AppSec Fail
Last Message: 2/4/2019
 |  Comments: 2
Open Source & Machine Learning: A Dynamic Duo
Last Message: 2/4/2019
 |  Comments: 1
Yes, You Can Patch Stupid
Last Message: 2/3/2019
 |  Comments: 5
Facebook Faces Action From German Watchdog
Last Message: 2/1/2019
 |  Comments: 3
Consumers Demand Security from Smart Device Makers
Last Message: 2/1/2019
 |  Comments: 2
<<   <   Page 2 / 2


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Enterprise Cybersecurity Plans in a Post-Pandemic World
Download the Enterprise Cybersecurity Plans in a Post-Pandemic World report to understand how security leaders are maintaining pace with pandemic-related challenges, and where there is room for improvement.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2021-24613
PUBLISHED: 2021-09-20
The Post Views Counter WordPress plugin before 1.3.5 does not sanitise or escape its Post Views Label settings, which could allow high privilege users to perform Cross-Site Scripting attacks in the frontend even when the unfiltered_html capability is disallowed
CVE-2021-24618
PUBLISHED: 2021-09-20
The Donate With QRCode WordPress plugin before 1.4.5 does not sanitise or escape its QRCode Image setting, which result into a Stored Cross-Site Scripting (XSS). Furthermore, the plugin also does not have any CSRF and capability checks in place when saving such setting, allowing any authenticated us...
CVE-2021-24635
PUBLISHED: 2021-09-20
The Visual Link Preview WordPress plugin before 2.2.3 does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user (such as subscriber) to call them and 1) Get and search through title and content of Draft post, ...
CVE-2021-24636
PUBLISHED: 2021-09-20
The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link
CVE-2021-24637
PUBLISHED: 2021-09-20
The Google Fonts Typography WordPress plugin before 3.0.3 does not escape and sanitise some of its block settings, allowing users with as role as low as Contributor to perform Stored Cross-Site Scripting attacks via blockType (combined with content), align, color, variant and fontID argument of a Gu...