Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management

Dark Reading Article Boards

Message Boards posted in August 2014
Page 1 / 2   >   >>
Online Dating Site Breached
Last Message: 8/31/2014  |  Comments: 1
CryptoWall More Pervasive, Less Profitable Than CryptoLocker
Last Message: 8/29/2014  |  Comments: 5
Feds Investigating Breaches At JP Morgan, Other Banks
Last Message: 8/29/2014  |  Comments: 8
Online Tools For Bug Disclosure Abound
Last Message: 8/29/2014  |  Comments: 4
Biggest Cache of Stolen Creds Ever Includes 1.2 Billion Unique Logins
Last Message: 8/28/2014  |  Comments: 16
The Best of the Rest of Black Hat: The Enterprise View
Last Message: 8/27/2014  |  Comments: 147
Access Point Pinched From Black Hat Show WLAN
Last Message: 8/27/2014  |  Comments: 4
6 Biometric Factors That Are Working Today
Last Message: 8/27/2014  |  Comments: 23
Debugging The Myths Of Heartbleed
Last Message: 8/26/2014  |  Comments: 5
Nuclear Regulatory Commission Compromised 3 Times In Past 3 Years
Last Message: 8/26/2014  |  Comments: 5
Flash Poll: CSOs Need A New Boss
Last Message: 8/26/2014  |  Comments: 4
27 Million South Koreans Victimized In Online Gaming Heist
Last Message: 8/26/2014  |  Comments: 6
Hacker Or Military? Best Of Both In Cyber Security
Last Message: 8/26/2014  |  Comments: 6
Security of 'Things'
Last Message: 8/26/2014  |  Comments: 3
51 UPS Stores' Point-of-Sale Systems Breached
Last Message: 8/25/2014  |  Comments: 7
JP Morgan Targeted in New Phishing Campaign
Last Message: 8/25/2014  |  Comments: 4
Website Attack Attempts Via Vegas Rose During Black Hat, DEF CON
Last Message: 8/24/2014  |  Comments: 4
Active Directory Flaw Lets Attackers Change Passwords
Last Message: 8/23/2014  |  Comments: 12
US, German Researchers Build Android Security Framework
Last Message: 8/22/2014  |  Comments: 2
Infographic: 70 Percent of World's Critical Utilities Breached
Last Message: 8/20/2014  |  Comments: 8
Healthcare Information Security: Still No Respect
Last Message: 8/20/2014  |  Comments: 17
The Best of the Rest of Black Hat: Do Critical Systems Trust Too Much?
Last Message: 8/20/2014  |  Comments: 101
Q&A: DEF CON At 22
Last Message: 8/20/2014  |  Comments: 2
Cloud Apps & Security: When Sharing Matters
Last Message: 8/19/2014  |  Comments: 5
SuperValu Food Stores Reports Network Intrusion
Last Message: 8/19/2014  |  Comments: 8
Community Health Systems Breach Atypical For Chinese Hackers
Last Message: 8/19/2014  |  Comments: 8
Slideshow: Ten Free Security Monitoring Tools
Last Message: 8/19/2014  |  Comments: 1
Google Sounds Chrome Browser Hijack Alarm
Last Message: 8/18/2014  |  Comments: 6
NSA Collected More Records Than Court Allowed
Last Message: 8/18/2014  |  Comments: 5
Time To Broaden CompSci Curriculum Beyond STEM
Last Message: 8/18/2014  |  Comments: 15
Stuxnet Exploits Still Alive & Well
Last Message: 8/18/2014  |  Comments: 3
UK Reconsidering Biometrics
Last Message: 8/16/2014  |  Comments: 4
CloudBot: A Free, Malwareless Alternative To Traditional Botnets
Last Message: 8/16/2014  |  Comments: 1
Closing The Skills Gap Between Hackers & Defenders: 4 Steps
Last Message: 8/16/2014  |  Comments: 17
"Hack My Google Glass: Security's Next Big Worry?"
Last Message: 8/16/2014  |  Comments: 7
Test Drive: GFI LanGuard 2014
Last Message: 8/15/2014  |  Comments: 1
Why Patching Makes My Heart Bleed
Last Message: 8/15/2014  |  Comments: 2
Heartbleed, GotoFail Bring Home Pwnie Awards
Last Message: 8/15/2014  |  Comments: 5
Hosting Companies' Traffic Hijacked In Crypto Currency Heist
Last Message: 8/15/2014  |  Comments: 2
Internet Of Things Security Reaches Tipping Point
Last Message: 8/15/2014  |  Comments: 11
Researcher Finds Potholes In Vehicle Traffic Control Systems
Last Message: 8/14/2014  |  Comments: 15
The Best of the Rest of Black Hat, Part 1
Last Message: 8/13/2014  |  Comments: 64
No Fixes In Sight For Satellite Terminal Flaws
Last Message: 8/12/2014  |  Comments: 2
Dan Geer Touts Liability Policies For Software Vulnerabilities
Last Message: 8/12/2014  |  Comments: 6
Automakers Openly Challenged To Bake In Security
Last Message: 8/12/2014  |  Comments: 3
Payment Card Data Theft: Tips For Small Business
Last Message: 8/12/2014  |  Comments: 8
The Hyperconnected World Has Arrived
Last Message: 8/11/2014  |  Comments: 6
The Illegitimate Milliner’s Guide to Black Hat
Last Message: 8/11/2014  |  Comments: 9
TSA Checkpoint Systems Found Exposed on the Net
Last Message: 8/10/2014  |  Comments: 2
Device-Based Mass-Market Authentication Rollout
Last Message: 8/8/2014  |  Comments: 1
Page 1 / 2   >   >>


When It Comes To Security Tools, More Isn't More
Lamont Orange, Chief Information Security Officer at Netskope,  1/11/2021
US Capitol Attack a Wake-up Call for the Integration of Physical & IT Security
Seth Rosenblatt, Contributing Writer,  1/11/2021
IoT Vendor Ubiquiti Suffers Data Breach
Dark Reading Staff 1/11/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-25533
PUBLISHED: 2021-01-15
An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct ...
CVE-2021-3162
PUBLISHED: 2021-01-15
Docker Desktop Community before 2.5.0.0 on macOS mishandles certificate checking, leading to local privilege escalation.
CVE-2021-21242
PUBLISHED: 2021-01-15
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, there is a critical vulnerability which can lead to pre-auth remote code execution. AttachmentUploadServlet deserializes untrusted data from the `Attachment-Support` header. This Servlet does not enforce any authentication or a...
CVE-2021-21245
PUBLISHED: 2021-01-15
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, AttachmentUploadServlet also saves user controlled data (`request.getInputStream()`) to a user specified location (`request.getHeader("File-Name")`). This issue may lead to arbitrary file upload which can be used to u...
CVE-2021-21246
PUBLISHED: 2021-01-15
OneDev is an all-in-one devops platform. In OneDev before version 4.0.3, the REST UserResource endpoint performs a security check to make sure that only administrators can list user details. However for the `/users/` endpoint there are no security checks enforced so it is possible to retrieve ar...